CVE-2023-3581
WebSockets accept connections from HTTPS origin
Summary
WebSockets accept connections from HTTPS origin
Original description
The description as published by the source.
Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com