CVE-2023-5331

Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file information.

Score

CVSS 3.1 5.3 Medium

Status

Modified - responsibledisclosure@mattermost.com

Published

2023-10-09

Last modified

2024-09-05

Weaknesses

CWE-862

Affected products

• Mattermost (Mattermost)
• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates