CVE-2024-43105: Mattermost Plugin Channel Export excessive resource consumption

August 23, 2024

Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once.

References

github.com/advisories/GHSA-869f-px86-vj84
github.com/mattermost/mattermost-plugin-channel-export
github.com/mattermost/mattermost-plugin-channel-export/commit/bb6da1f6bedd6cefe2276d6493b5541843c543a6
mattermost.com/security-updates
nvd.nist.gov/vuln/detail/CVE-2024-43105

Code Behaviors & Features

Detect and mitigate CVE-2024-43105 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →