CVE-2023-2783
App Framework does not checks for the secret provided in the incoming webhook request
Résumé
App Framework does not checks for the secret provided in the incoming webhook request
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com