Medium WID-SEC-2023-0545 4 CVEs

Mattermost: Mehrere Schwachstellen

Published Mar 1, 2023 · Updated Apr 2, 2023 · Revision 2 · de-DE

Vendor: Mattermost Product: Mattermost Product: Mattermost < 7.1.6 Product: Mattermost < 7.7.2 Product: Mattermost < 7.8.0 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um Informationen offenzulegen, einen Cross-Site Scripting Angriff durchzuführen und Sicherheitsvorkehrungen zu umgehen.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 4

High 7.3

CVE-2023-1776

Stored XSS via SVG attachment on Boards

Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it using a direct link to the file.

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Mar 31, 2023
Medium 6.5

CVE-2023-1777

Information disclosure in linked message previews

Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Mar 31, 2023
Medium 4.3

CVE-2023-1775

Unsanitized events sent over Websocket to regular users in a High Availability environment

When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket cli…

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Mar 31, 2023
Medium 4.2

CVE-2023-1774

Unauthorized email invite to a private channel

When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to that channel, allowing an attacker to invite themselves to a private channel.

Mattermost Mattermost github.com/mattermost/mattermost-server github.com/mattermost/mattermost-server/v6 Go

Mar 31, 2023

Revision history

2023-04-02 #2
Informationen von Mattermost aufgenommen
2023-03-01 #1
Initiale Fassung

References

NIST Vunerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-1774
NIST Vunerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-1775
NIST Vunerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-1776
NIST Vunerability Database
https://nvd.nist.gov/vuln/detail/CVE-2023-1777
Mattermost Security Updates vom 2023-03-01
https://mattermost.com/security-updates/