CVE Catalog
CVE-2023-3581
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.22%
12th percentile - higher than 12% of all known CVEs
Summary
Mattermost fails to properly validate the origin of a websocket connection, allowing a MITM attacker to access the websocket APIs.
Risk Assessment
An attacker could intercept and manipulate data transmitted over websockets, potentially leading to the exposure of sensitive information.
Recommendation
It is recommended to update Mattermost to the latest version that addresses the websocket connection validation.
Original NVD description (English source)
Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.