Lucene search

GoogleOSV:CVE-2023-5875

HistoryNov 02, 2023 - 9:15 a.m.

CVE-2023-5875

2023-11-0209:15:08

Google

osv.dev

mattermost desktop

permissions

consent

media exploitation

malicious server

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious mattermost server

CPENameOperatorVersion
desktopeq1.3.0-rc1
desktopeq4.0.0
desktopeq5.5.1-rc.2
desktopeq5.5.0-mas.1
desktopeq1.0.4
desktopeq1.0.7
desktopeq1.1.1
desktopeq0.1.0
desktopeq4.1.2
desktopeq3.7.1

Name	Operator	Version
desktop	eq	1.3.0-rc1
desktop	eq	4.0.0
desktop	eq	5.5.1-rc.2
desktop	eq	5.5.0-mas.1
desktop	eq	1.0.4
desktop	eq	1.0.7
desktop	eq	1.1.1
desktop	eq	0.1.0
desktop	eq	4.1.2
desktop	eq	3.7.1

Rows per page:

1-10 of 431

References

mattermost.com/security-updates

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for OSV:CVE-2023-5875