CVE-2023-48732

Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel...

CVE-2023-48732 vulnerabilities

Vulnerabilities for packages: mattermost-fips...

CVE-2023-48732

creationtimestamp| type| source ---|---|--- 2024-01-02 11:26:27+00:00| seen| https://t.me/ctinow/161683 2024-01-03 01:35:20+00:00| seen| https://t.me/cibsecurity/74177...

CVE-2023-48732 Keywords that trigger mentions are leaked to other users

Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel...

CVE-2023-48732

Mattermost (Mattermost server) vulnerability CVE-2023-48732: WebSocket responses were not properly scoped to individual notified users, causing disclosure of who was notified about a post to all users in the channel. Exploitation status not detailed in provided documents, and no explicit in-the-w...

CVE-2023-48732 Keywords that trigger mentions are leaked to other users

Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel...