Information Disclosure

github.com/mattermost/mattermost-server is vulnerable to Information Disclosure. The vulnerability exists due to not sanitizing some of the userupdated and postdeleted event broadcasts to all users which allows an attacker to gain access to sensitive information...

CVE-2023-1775: Exposure of Sensitive Information to an Unauthorized Actor

When running in a High Availability configuration, Mattermost fails to sanitize some of the userupdated and postdeleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients...