Mattermost Denial-of-Service Vulnerability in Bulk Import Feature

A denial-of-service vulnerability has been identified in Mattermost versions 10.8.x through 10.8.3, 10.5.x through 10.5.8, 9.11.x through 9.11.17, 10.10.x through 10.10.0, and 10.9.x through 10.9.3. The issue arises because these versions fail to properly validate import data, allowing a system administrator to crash the server by exploiting the bulk import feature.

Impact

Exploitation of this vulnerability leads to a server crash, causing a denial-of-service condition.

Remediation

Users can upgrade to Mattermost versions 10.11.0, 10.5.10, 9.11.18, or 10.10.1 to address this vulnerability.