CVE-2023-1775

Publication date

2023-03-31 11:26:21

Family

Mattermost

State

PUBLISHED

Description

When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients.