CVE-2023-5968

CVSS V2 None CVSS V3 None
Description
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 
Overview
  • CVE ID
  • CVE-2023-5968
  • Assigner
  • Mattermost
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-06T15:35:14.094Z
  • Last Modified Date
  • 2023-11-06T15:35:14.094Z
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
References
Reference URL Reference Tags
https://mattermost.com/security-updates
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-5968
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5968
History
Created Old Value New Value Data Type Notes
2024-06-25 05:11:42 Added to TrackCVE