CVE-2023-3581
WebSockets accept connections from HTTPS origin
Résumé
WebSockets accept connections from HTTPS origin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com