Lucene search
GoogleOSV:GO-2024-2448HistoryJun 28, 2024 - 3:28 p.m.
Mattermost notified all users in the channel when using WebSockets to respond individually in github.com/mattermost/mattermost-server
2024-06-2815:28:53
Google
osv.dev
mattermost
websockets
github
server
software
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
14.2%
Mattermost notified all users in the channel when using WebSockets to respond individually in github.com/mattermost/mattermost-server
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/mattermost/mattermost-server | lt | 8.1.7+incompatible |
Related
cvelist
cvelist
CVE-2023-48732 Keywords that trigger mentions are leaked to other users
2024-01-02 09:52:01
osv
osv
Mattermost notified all users in the channel when using WebSockets to respond individually
2024-01-02 12:30:18
CVE-2023-48732
2024-01-02 10:15:08
CGA-jhcr-g7wj-9vq2
2024-06-24 14:34:07
nvd
nvd
CVE-2023-48732
2024-01-02 10:15:08
veracode
veracode
Insufficient Authorization
2024-01-03 09:09:19
github
github
prion
prion
Information disclosure
2024-01-02 10:15:00
cve
cve
CVE-2023-48732
2024-01-02 10:15:08
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
14.2%
Related for OSV:GO-2024-2448