Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/06/22 3:30 p.m.•18 views

Mattermost doesn't invalidate cached authentication state for active WebSocket connections during global session revocation

Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to invalidate cached authentication state for active WebSocket connections during global session revocation, which allows a user with an existing WebSocket connection to remain authenticated and continu...

4.3CVSS5.8AI score0.00334EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder