CVE Catalog
CVE-2023-3585
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.45%
35th percentile - higher than 35% of all known CVEs
Summary
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.
Risk Assessment
An attacker can disrupt the functionality of channels in Mattermost, leading to a loss of communication availability within the organization.
Recommendation
It is recommended to update Mattermost to the latest version that fixes the validation of board links.
Original NVD description (English source)
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.