← Back

CVE-2019-20860

nvd nist
Published: Jun 19, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service (application hang) via a crafted SVG document.

Affected (8)

1 product
Mattermost Server
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Mattermost
version < 5.9.4
5.12.0 ≤ version < 5.12.6
5.13.0 ≤ version < 5.13.3
Version 5.14.0 rc1
Version 5.14.0 rc2
Version 5.14.0 rc3
Version 5.14.0 rc4
Version 5.14.0 rc5

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.