Lucene search
GoogleOSV:BIT-MATTERMOST-2023-48732HistoryMar 06, 2024 - 10:58 a.m.
BIT-mattermost-2023-48732
2024-03-0610:58:26
Google
osv.dev
6
mattermost
websocket
broadcasting
issue
scope
response
notified users
Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost | lt | 8.1.7 |
References
Related
cvelist
cvelist
CVE-2023-48732 Keywords that trigger mentions are leaked to other users
2024-01-02 09:52:01
prion
prion
Information disclosure
2024-01-02 10:15:00
cve
cve
CVE-2023-48732
2024-01-02 10:15:08
osv
osv
Mattermost notified all users in the channel when using WebSockets to respond individually
2024-01-02 12:30:18
CVE-2023-48732
2024-01-02 10:15:08
veracode
veracode
Insufficient Authorization
2024-01-03 09:09:19
github
github
6.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
13.7%
Related for OSV:BIT-MATTERMOST-2023-48732