Lucene search
PRIOn knowledge basePRION:CVE-2023-6459HistoryDec 06, 2023 - 9:15 a.m.
Design/Logic Flaw
2023-12-0609:15:00
PRIOn knowledge base
www.prio-n.com
3
mattermost
logic flaw
endpoint
channelids
nvd
Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the channelID, the public /metrics endpoint is revealing channelIDs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost_server | ge | 8.0.0 | |
| mattermost_server | lt | 8.1.5 | |
| mattermost_server | lt | 7.8.14 |
References
Related
veracode
veracode
Information Disclosure
2023-12-07 12:19:42
osv
osv
CGA-wm9x-r8p7-p6qr
2024-06-24 14:34:07
BIT-mattermost-2023-6459
2024-03-06 10:56:54
cvelist
cvelist
CVE-2023-6459 Public endpoint /metrics of Calls plugin reveals channel IDs
2023-12-06 08:11:36
nvd
nvd
CVE-2023-6459
2023-12-06 09:15:09
cve
cve
CVE-2023-6459
2023-12-06 09:15:09
github
github