Low WID-SEC-2023-1074 1 CVE

Mattermost: Schwachstelle ermöglicht Offenlegung von Informationen

Published Apr 25, 2023 · Updated Apr 25, 2023 · de-DE

Vendor: Mattermost Product: Mattermost Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Mattermost ausnutzen, um Informationen offenzulegen.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 1

Low 3.1

CVE-2023-2281

Archiving a team broadcasts unsanitized data over WebSockets

When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team.

Mattermost Mattermost

Apr 25, 2023

Revision history

2023-04-25 #1
Initiale Fassung

References

National Vulnerability Database vom 2023-04-26
https://nvd.nist.gov/vuln/detail/CVE-2023-2281
Github Advisory Database vom 2023-04-26
https://github.com/advisories/GHSA-7qh6-7gxc-2q62