Lucene search
GitHub Advisory DatabaseGHSA-4GHX-8JW8-P76QHistoryNov 27, 2023 - 12:30 p.m.
Mattermost Open Redirect vulnerability
2023-11-2712:30:54
CWE-601
GitHub Advisory Database
github.com
7
mattermost
open redirect
vulnerability
redirect url
parameter
invalid custom url scheme
oauth
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
17.0%
Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked “Back to Mattermost” after providing a invalid custom url scheme in /oauth/{service}/mobile_login?redirect_to=
Affected configurations
Node
github.com\/mattermost\/mattermostserver\/v6Range<7.8.13
ORgithub.com\/mattermost\/mattermostserverRange<8.1.4
ORgithub.com\/mattermost\/mattermostserverRange<9.0.2
ORgithub.com\/mattermost\/mattermostserverRange<9.1.1
Related
osv
osv
CGA-88f2-7w55-gf92
2024-07-15 21:52:55
Mattermost Open Redirect vulnerability
2023-11-27 12:30:54
CGA-rmv6-gv8r-23fq
2024-06-24 14:34:06
veracode
veracode
Open Redirect
2023-11-28 08:09:41
cnvd
cnvd
Mattermost Open Redirect Vulnerability
2023-11-30 00:00:00
nvd
nvd
CVE-2023-47168
2023-11-27 10:15:08
cvelist
cvelist
CVE-2023-47168 Open redirect in /oauth/<service>/mobile_login?redirect_to=
2023-11-27 09:12:52
prion
prion
Open redirect
2023-11-27 10:15:00
cve
cve
CVE-2023-47168
2023-11-27 10:15:08
nessus
nessus
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
7
Confidence
Low
EPSS
0.001
Percentile
17.0%
Related for GHSA-4GHX-8JW8-P76Q