Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 2:15 a.m.•22 views

CVE-2023-3577

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF...

4.3CVSS5.5AI score0.00378EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/17 4:15 p.m.•34 views

Server side request forgery (ssrf)

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF...

4CVSS4.7AI score0.00378EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/07/17 3:18 p.m.•11 views

CVE-2023-3577

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF...

4.3CVSS5.5AI score0.00378EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/07/17 3:18 p.m.•41 views

CVE-2023-3577 Limited blind SSRF to localhost/intranet in interactive dialog implementation

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF...

3.5CVSS4.9AI score0.00378EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/07/17 3:18 p.m.•31 views

CVE-2023-3577 Limited blind SSRF to localhost/intranet in interactive dialog implementation

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF...

3.5CVSS5.9AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•8 views

CVE-2023-3577: Server-Side Request Forgery (SSRF)

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF...

4.3CVSS5.5AI score0.00378EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/07/17 12:00 a.m.•19 views

PT-2023-25299 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF. Recommendations: At the...

4.3CVSS5.4AI score0.00378EPSS
SaveExploits0References8
Rows per page
Query Builder