Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.
References
Link | Resource |
---|---|
https://mattermost.com/security-updates | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Mattermost
Published: 2024-01-02T09:52:01.147Z
Updated: 2024-01-02T09:52:01.147Z
Reserved: 2023-12-21T08:00:43.425Z
Link: CVE-2023-48732
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-01-02T10:15:08.487
Modified: 2024-01-08T19:03:27.590
Link: CVE-2023-48732
JSON object: View
Redhat Information
No data.