What is CVE-2023-48268?

CVE-2023-48268 is a medium-severity vulnerability in Mattermost, classified under Uncontrolled Resource Consumption. CVSS score: 4.3/10. Published 2023-11-27.

How severe is CVE-2023-48268?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Is CVE-2023-48268 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Resource exhaustion in Mattermost

CVE-2023-48268

Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip (zip bomb).

Vulnerability class: DoS (Denial of Service)

EPSS: 0.007 (50.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Mattermost — versions 7.8.13, 8.1.4, 0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

responsibledisclosure@mattermost.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-48268?: CVE-2023-48268 is a medium-severity vulnerability in Mattermost, classified under Uncontrolled Resource Consumption. CVSS score: 4.3/10. Published 2023-11-27.
How severe is CVE-2023-48268?: Medium severity. CVSS v3 base score is 4.3 out of 10.
Is CVE-2023-48268 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.