VULNERABILITY INTELLIGENCE

CVE-2023-2281

CVSS score3.1 LOW
EPSS probability0.47%
CISA KEVNot currently listed
Published2023-04-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-200
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references