CVE-2023-5331
File Information Leak via IDOR in file_id in Draft Posts
Résumé
File Information Leak via IDOR in file_id in Draft Posts
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file information.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com