Mattermost Denial-of-Service Vulnerability in Playbooks Plugin RetrospectivePost Custom Post Type

A denial-of-service vulnerability has been identified in the Mattermost Playbooks plugin, specifically within versions 10.4.x prior to 10.4.2, 10.5.x prior to 10.5.0, and 9.11.x prior to 9.11.10. The issue arises because these versions do not properly validate the properties used by the RetrospectivePost custom post type. This lack of validation allows an attacker to create a post with maliciously crafted properties, leading to a denial-of-service condition that affects the web application for all users.

Impact

Exploitation of this vulnerability causes a denial-of-service condition on the web application, impacting all users.