x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-channel-export: GHSA-869f-px86-vj84

[GoVulnBot]

Advisory GHSA-869f-px86-vj84 references a vulnerability in the following Go modules:

Module
github.com/mattermost/mattermost-plugin-channel-export

Description:
Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple times at once.

References:

• ADVISORY: GHSA-869f-px86-vj84
• ADVISORY: https://nvd.nist.gov/vuln/detail/CVE-2024-43105
• FIX: mattermost/mattermost-plugin-channel-export@bb6da1f
• WEB: https://mattermost.com/security-updates

No existing reports found with this module or alias.
See doc/quickstart.md for instructions on how to triage this report.

id: GO-ID-PENDING
modules:
    - module: github.com/mattermost/mattermost-plugin-channel-export
      versions:
        - fixed: 1.0.1
      vulnerable_at: 1.0.0
summary: Mattermost Plugin Channel Export excessive resource consumption in github.com/mattermost/mattermost-plugin-channel-export
cves:
    - CVE-2024-43105
ghsas:
    - GHSA-869f-px86-vj84
references:
    - advisory: https://github.com/advisories/GHSA-869f-px86-vj84
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-43105
    - fix: https://github.com/mattermost/mattermost-plugin-channel-export/commit/bb6da1f6bedd6cefe2276d6493b5541843c543a6
    - web: https://mattermost.com/security-updates
source:
    id: GHSA-869f-px86-vj84
    created: 2024-08-23T22:02:54.483654199Z
review_status: UNREVIEWED

[gopherbot]

Change https://go.dev/cl/609141 mentions this issue: data/reports: add 21 unreviewed reports