CVE-2023-5969: Mattermost

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially crafted request to /api/v4/redirect_location, to fill up the memory due to caching large items.

Affected products

• Mattermost Mattermost: up to and including 7.8.11; from 8.0.0, up to and including 8.0.3; from 8.1.0, up to and including 8.1.2; version 9.0.0 only

Published 2023-11-06. Last modified 2026-06-17.