CVE-2023-3581

CVSS V2 None CVSS V3 None
Description
Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
Overview
  • CVE ID
  • CVE-2023-3581
  • Assigner
  • Mattermost
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-07-17T15:20:00.186Z
  • Last Modified Date
  • 2023-07-17T15:20:00.186Z
Weakness Enumerations
CWE URL
CWE-346 http://cwe.mitre.org/data/definitions/346.html
References
Reference URL Reference Tags
https://mattermost.com/security-updates
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-3581
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3581
History
Created Old Value New Value Data Type Notes
2024-06-24 20:34:34 Added to TrackCVE