Security Advisory

CVE-2023-1775

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-31 11:26:21

Last updated 2024-12-06 23:05:41

Assigner Mattermost

State PUBLISHED

Description

When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients.

← Browse all CVEs View on cve.org ↗