CVE-2023-2281

creationtimestamp| type| source ---|---|--- 2023-04-25 18:25:05+00:00| seen| https://t.me/cibsecurity/62810...

CVE-2023-2281

When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team...

CVE-2023-2281 Archiving a team broadcasts unsanitized data over WebSockets

When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team...

CVE-2023-2281

CVE-2023-2281 describes an information-disclosure bug in Mattermost Server: when archiving a team, the related WebSocket event is not sanitized, allowing currently connected clients to see sensitive data such as the team’s name, display name, description, and other archived-team data. The connect...

CVE-2023-2281 Archiving a team broadcasts unsanitized data over WebSockets

When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team...