CVE-2023-3577 — Limited blind SSRF to localhost/intranet in interactive dialog implementation

CVE-2023-3577

Limited blind SSRF to localhost/intranet in interactive dialog implementation PUBLISHED

Description (CNA)

Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 7.9.6; affected 0 through 7.8.6; affected 0 through 7.10.2; unaffected 7.8.7; unaffected 7.10.3

CWE

CWE-918

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.