CVE-2023-48732 — Keywords that trigger mentions are leaked to other users

CVE-2023-48732

Keywords that trigger mentions are leaked to other users PUBLISHED

Description (CNA)

Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 8.1.6; unaffected 8.1.7

CWE

CWE-200

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.