CVE-2023-1777
Information disclosure in linked message previews
Résumé
Information disclosure in linked message previews
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com