CVE-2023-3581

Publication date

2023-07-17 15:20:00

Family

Mattermost

State

PUBLISHED

Description

Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.