CVE-2023-1775
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-1775
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-1775.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-1775
- Aliases
- Published
- 2023-03-31T12:15:06Z
- Modified
- 2024-10-12T10:29:26.859521Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
When running in a High Availability configuration, Mattermost fails to sanitize some of the userupdated and postdeleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients.
- References
Affected packages
Git / github.com/mattermost/mattermost
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mattermost/mattermost
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
Other
cloud-2022-06-29-1
v0.*
v0.5.0
v0.6.0
v1.*
v1.0.0
v1.1.0
v1.1.1
v1.2.1
v1.3.0
v1.4.0
v2.*
v2.0.0
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v3.2.0
v3.3.0
v3.4.0
v3.5.0
v3.5.1
v3.6.0
v3.6.1
v3.7.0
v3.7.1
v3.7.2
v3.7.3
v3.8.0
v4.*
v4.0.0
v4.0.1
v4.1.0
v4.10.0
v4.10.0-rc1
v4.10.0-rc2
v4.10.0-rc3
v4.10.0-rc4
v4.10.0-rc5
v4.2.0-rc1
v4.3.0
v4.3.0-rc1
v4.3.0-rc2
v4.3.0-rc3
v4.3.0-rc4
v4.4.0
v4.4.0-rc1
v4.4.0-rc2
v4.4.0-rc3
v4.4.0-rc4
v4.4.0-rc5
v4.5.0
v4.5.0-rc1
v4.5.0-rc2
v4.5.0-rc3
v4.5.0-rc4
v4.5.1
v4.5.1-rc1
v4.5.2
v4.5.2-rc1
v4.6.0
v4.6.0-rc1
v4.6.0-rc2
v4.6.0-rc3
v4.6.0-rc4
v4.6.0-rc5
v4.6.0-rc6
v4.7.0
v4.7.0-rc1
v4.7.0-rc2
v4.7.0-rc3
v4.7.0-rc4
v4.7.1
v4.7.1-rc1
v4.7.2
v4.7.2-rc1
v4.7.2-rc2
v4.7.2-rc3
v4.7.3
v4.7.3-rc1
v4.8.0
v4.8.0-rc1
v4.8.0-rc2
v4.8.0-rc3
v4.8.0-rc4
v4.8.0-rc5
v4.8.0-rc6
v4.9.0
v4.9.0-rc1
v4.9.0-rc2
v4.9.0-rc3
v4.9.0-rc4
v4.9.0-rc5
v4.9.0-rc6
v5.*
v5.0.0
v5.0.0-rc1
v5.0.0-rc2
v5.0.0-rc3
v5.0.0-rc4
v5.0.0-rc5
v5.0.0-rc6
v5.0.0-rc7
v5.0.1
v5.0.1-rc1
v5.1.0
v5.1.0-rc1
v5.1.0-rc2
v5.1.0-rc3
v5.1.0-rc4
v5.2.0
v5.2.0-rc1
v5.2.0-rc2
v5.2.0-rc3
v5.2.0-rc4
v5.2.0-rc5
v5.2.0-rc6
v5.2.1
v5.2.1-rc1
v5.3.0
v5.3.0-rc1
v5.3.0-rc2
v5.3.0-rc3
v5.3.0-rc4
v5.3.0-rc5
v5.3.1
v5.3.1-rc1
v7.*
v7.1.0
v7.1.1
v7.1.2
v7.1.3
v7.1.4
v7.1.5