Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00611
| Vendor | Product | Versions |
|---|---|---|
| mattermost | mattermost | 0 |
Updated description with new details, marked exploit availability as false, and added CVE ID tag.
Initial creation
