← CVE Intelligence

CVE-2023-2193

Oauth authorization codes do not expire when deauthorizing an oauth2 app PUBLISHED

Description (CNA)

Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 7.1.7; affected 0 through 7.7.3; affected 0 through 7.8.2; affected 0 through 7.9.1; unaffected 7.10; unaffected 7.9.3; unaffected 7.8.4; unaffected 7.7.5; unaffected 7.1.9

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.