[github.com/mattermost/mattermost-server/v6] Resource exhaustion in Mattermost

The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-1337
• https://mattermost.com/security-updates/
• https://github.com/advisories/GHSA-f37q-q7p2-ccfc