CVE-2023-2281 — Archiving a team broadcasts unsanitized data over WebSockets

CVE-2023-2281

Archiving a team broadcasts unsanitized data over WebSockets PUBLISHED

Description (CNA)

When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display name, description, and other data about the archived team.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 before 7.9; unaffected 7.9

CWE

CWE-200

References

https://mattermost.com/security-updates/

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/

CISA-ADP

No English description supplied.

No references supplied.