An issue was discovered in Mattermost Server before 5.23.0. Automatic direct message replies allow attackers to cause a denial of service (infinite loop), aka MMSA-2020-0020.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14448
Reference (s):
- https://mattermost.com/security-updates/