Mattermost Infinite Re-Render Vulnerability Leading to Application-Level Denial-of-Service

A denial-of-service vulnerability has been identified in Mattermost versions 10.11.x prior to 10.11.9, 11.1.x prior to 11.1.1, and 11.0.x prior to 11.0.6. The issue arises because these versions fail to properly handle API errors, allowing authenticated users to create infinite re-render loops in the application. This unbounded component re-rendering can cause significant disruption to the application's normal functioning.

Impact

Exploitation of this vulnerability can lead to application-level denial-of-service, causing the application to become unresponsive or slow due to the excessive re-rendering of components.

Remediation

Users can upgrade to Mattermost versions 11.3.010.11.10 or 11.2.010.11.911.1.211.0.7 to address this vulnerability.