{"action":"Upgrade github.com/mattermost/mattermost-server/v6 to 7.2.0 or later.","affected":[{"fixed":"7.2.0","introduced":"7.1.0"}],"component":"github.com/mattermost/mattermost-server/v6","cve_ids":["CVE-2022-3257"],"ecosystem":"Go","epss":0.0126,"exploited":false,"fixed_versions":["7.2.0"],"ghsa_id":"GHSA-m7w4-q5vg-5xfp","id":"tcs_01M5KFFGFTKHCS6189FA9CENVQ","modified_at":"2023-12-06T01:02:21.507277Z","published_at":"2022-09-25T00:00:21Z","references":["https://osv.dev/vulnerability/GHSA-m7w4-q5vg-5xfp","https://nvd.nist.gov/vuln/detail/CVE-2022-3257","https://hackerone.com/reports/1620170","https://github.com/mattermost/mattermost-server","https://mattermost.com/security-updates"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-m7w4-q5vg-5xfp","url":"https://osv.dev/vulnerability/GHSA-m7w4-q5vg-5xfp"}],"summary":"Mattermost subject to Denial of Service via upload of special GIF"}