Skip to content
OpenAdvisories
Medium WID-SEC-2023-1486 10 CVEs

Mattermost: Mehrere Schwachstellen

Published Jun 15, 2023 · Updated Jul 17, 2023 · Revision 3 · de-DE

Vendor: Mattermost Product: Mattermost Product: Mattermost < 7.10.3 Product: Mattermost < 7.9.5 Product: Mattermost < v7.8.7 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Mattermost ausnutzen, um einen Denial-of-Service-Zustand auszulösen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 10

  • Medium 6.2
    CVE-2023-3581

    WebSockets accept connections from HTTPS origin

    Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.

    Mattermost Mattermost
  • Medium 4.8
    CVE-2023-3591

    Lack of previous password reset tokens on new token creation

    Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created.

    Mattermost Mattermost
  • Medium 4.3
    CVE-2023-3582

    Lack of channel membership check when linking a board to a channel

    Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to, 

    Mattermost Mattermost
  • Medium 4.3
    CVE-2023-3585

    channel DoS by sharing a boards link

    Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.

    Mattermost Mattermost
  • Medium 4.3
    CVE-2023-3593

    Server crash via a specially crafted markdown input

    Mattermost fails to properly validate markdown, allowing an attacker to crash the server via a specially crafted markdown input.

    Mattermost Mattermost
  • Medium 4.2
    CVE-2023-3586

    Disabling publicly-shared boards does not disable existing publicly available board links

    Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible.

    Mattermost Mattermost
  • Low 3.5
    CVE-2023-3577

    Limited blind SSRF to localhost/intranet in interactive dialog implementation

    Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF.

    Mattermost Mattermost
  • Low 3.5
    CVE-2023-3613

    Guest accounts invited and added to channels by Welcomebot plugin

    Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

    Mattermost Mattermost Plugins
  • Low 3.1
    CVE-2023-3590

    Deleted attachments in Boards remain accessible

    Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments.

    Mattermost Mattermost
  • Low 2.7
    CVE-2023-3587

    Inconsistent state in UI after boards permission change by system admin

    Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.

    Mattermost Mattermost

Revision history

  1. #3

    CVE's hinzugefügt

  2. #2

    Referenz ergänzt

  3. #1

    Initiale Fassung

References