← CVE Intelligence

CVE-2023-5331

File Information Leak via IDOR in file_id in Draft Posts PUBLISHED

Description (CNA)

Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file information.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 7.8.10; affected 0 through 8.0.2; affected 0 through 8.1.1; unaffected 7.8.11; unaffected 8.0.3; unaffected 8.1.2

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.