CVE-2023-4108

Summary

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged

Affected Software

VendorProductVersion RangeStatus
MattermostMattermost0 <= 7.8.7affected
MattermostMattermost0 <= 7.9.5affected
MattermostMattermost0 <= 7.10.3affected
MattermostMattermost7.8.8unaffected
MattermostMattermost7.9.6unaffected
MattermostMattermost7.10.4unaffected

Weaknesses

  • CWE-532: CWE-532 Insertion of Sensitive Information into Log File

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References