CVE-2023-2281
Archiving a team broadcasts unsanitized data over WebSockets
Summary
Archiving a team broadcasts unsanitized data over WebSockets
Original description
The description as published by the source.
When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com