Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once.
References:GSA_kwCzR0hTQS04NjlmLXB4ODYtdmo4NM4AA-5V
Mattermost Plugin Channel Export excessive resource consumption
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
go:github.com/mattermost/mattermost-plugin-channel-export
PURL:
pkg:go/github.com%2Fmattermost%2Fmattermost-plugin-channel-export
|
< 1.0.1 | 1.0.1 | |
Affected Version RangesAll affected versionsv0.2.2, v1.0.0, v1.0.0-alpha-1 All unaffected versionsv1.0.1, v1.2.0, v1.2.1 |
|||