Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the channelID, the public /metrics endpoint is revealing channelIDs.
References
Link | Resource |
---|---|
https://mattermost.com/security-updates | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Mattermost
Published: 2023-12-06T08:11:36.417Z
Updated: 2023-12-06T08:11:36.417Z
Reserved: 2023-12-01T10:14:04.973Z
Link: CVE-2023-6459
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-12-06T09:15:09.140
Modified: 2023-12-12T19:23:29.137
Link: CVE-2023-6459
JSON object: View
Redhat Information
No data.