CVE-2023-2792
Ephemeral messages return private channel contents in permalink previews
Résumé
Ephemeral messages return private channel contents in permalink previews
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com