CVE-2023-2281
Archiving a team broadcasts unsanitized data over WebSockets
Résumé
Archiving a team broadcasts unsanitized data over WebSockets
Description d'origine
La description telle que publiée par la source (souvent en anglais).
When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com