CVE-2026-21388 - Unbounded Request Body Read in MS Teams Plugin Webhook Endpoint

CVE ID :CVE-2026-21388
Published : April 9, 2026, 10:09 a.m. | 52 minutes ago
Description :Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00610
Severity: 3.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

from Latest Vulnerabilities https://ift.tt/mBWIst6
via IFTTT