CVE-2024-23319

Publication date

2024-02-09 14:42:22

Family

Mattermost

State

PUBLISHED

Description

Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a users Jira connection in Mattermost only by viewing the message.