Lucene search

CVE-2023-47858 Details of archived public channels are leaked to members of another team

🗓️ 02 Jan 2024 09:25:54Reported by MattermostType

Mattermost CVE-2023-47858 data leakage

Reporter	Title	Published	Views	Family All 13
OSV	BIT-mattermost-2023-47858	6 Mar 202410:58	–	osv
OSV	CGA-8chv-gp3c-w92m	25 Sep 202402:09	–	osv
OSV	CVE-2023-47858	2 Jan 202410:15	–	osv
OSV	Mattermost viewing archived public channels permissions vulnerability in github.com/mattermost/mattermost-server	28 Jun 202415:28	–	osv
OSV	Mattermost viewing archived public channels permissions vulnerability	2 Jan 202412:30	–	osv
OSV	CGA-4m9j-264v-7mr3	24 Jun 202414:34	–	osv
OSV	CGA-qg72-5wh7-hvwr	15 Jul 202422:05	–	osv
OSV	CGA-846j-g95c-fqpg	25 Sep 202401:52	–	osv
NVD	CVE-2023-47858	2 Jan 202410:15	–	nvd
Veracode	Improper Authorization	3 Jan 202407:10	–	veracode

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "9.2.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.4",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.1.6",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "8.1.7"
      },
      {
        "status": "unaffected",
        "version": "9.0.5"
      },
      {
        "status": "unaffected",
        "version": "9.1.4"
      },
      {
        "status": "unaffected",
        "version": "9.2.3"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jan 2024 09:54Current

4.9Medium risk

Vulners AI Score4.9

CVSS34.3

EPSS0.001

CWE-284