Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled. CreditsBen SchumacherReferenceshttps://mattermost.com/security-updates
