CVE-2024-22091: 
vulnerability analysis and mitigation

CVE-2024-22091 affects Mattermost versions 8.1.x <= 8.1.10, 9.6.x <= 9.6.0, 9.5.x <= 9.5.2 and 8.1.x <= 8.1.11. The vulnerability is related to the failure to limit the size of request paths that include user inputs, which can lead to excessive resource consumption (NVD).

The vulnerability is classified as an Uncontrolled Resource Consumption issue (CWE-400). It has been assigned a CVSS v3.1 Base Score of 3.1 (LOW) with the vector string CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L, indicating network accessibility with high attack complexity, requiring low privileges, and potentially impacting system availability (NVD).

When exploited, this vulnerability allows an attacker to cause excessive resource consumption through sending large request paths, which could potentially lead to a Denial of Service (DoS) condition (NVD).

The vulnerability requires low privileges but has high attack complexity. An attacker needs network access to exploit the vulnerability by sending large request paths to affected Mattermost installations (NVD).

Users should upgrade to the latest version of Mattermost that addresses this vulnerability (Mattermost Security).