CVE-2023-2783
App Framework does not checks for the secret provided in the incoming webhook request
Summary
App Framework does not checks for the secret provided in the incoming webhook request
Original description
The description as published by the source.
Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com