CVE-2023-5969: 
Mattermost vulnerability analysis and mitigation

Mattermost contains a vulnerability (CVE-2023-5969) where the application fails to properly sanitize requests to /api/v4/redirect_location endpoint. This vulnerability allows attackers to send specially crafted requests that can fill up memory due to caching large items. The issue affects Mattermost versions up to 7.8.11, versions 8.0.0 through 8.0.3, versions 8.1.0 through 8.1.2, and version 9.0.0 (NVD).

The vulnerability is classified as an Uncontrolled Resource Consumption issue (CWE-400). It has been assigned a CVSS v3.1 base score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. The vulnerability specifically affects the /api/v4/redirect_location API endpoint, where improper request sanitization can lead to memory exhaustion through the caching of large items (NVD).

When exploited, this vulnerability can lead to memory exhaustion on affected Mattermost servers, potentially resulting in denial of service conditions. The attack vector requires no user interaction and can be executed remotely, though it only affects the availability of the system without compromising confidentiality or integrity (NVD).

Users are advised to upgrade to the latest version of Mattermost that contains the fix for this vulnerability. The issue has been addressed in subsequent releases after the affected versions (Mattermost Security).