VULNERABILITY INTELLIGENCE

CVE-2023-5967

CVSS score4.3 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2023-11-06

Last modified2026-06-17

Description

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin