CVE Catalog
CVE-2023-3586
MediumCVSS 4.2Exploitation Probability (EPSS)
Low risk0.23%
14th percentile - higher than 14% of all known CVEs
Summary
Mattermost fails to disable public Boards after the 'Enable Publicly-Shared Boards' configuration option is disabled, resulting in previously-shared public Boards to remain accessible.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive information that was previously shared on public Boards.
Recommendation
It is recommended to monitor and manually revoke access to public Boards, as well as review security configurations in Mattermost.
Original NVD description (English source)
Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible.