CVE Catalog
CVE-2023-4108
MediumCVSS 4.5Exploitation Probability (EPSS)
Low risk0.52%
40th percentile - higher than 40% of all known CVEs
Summary
Mattermost fails to sanitize post metadata during audit logging, resulting in permalinks contents being logged.
Risk Assessment
Unsecured logs may expose sensitive information, posing a risk to user privacy and data security.
Recommendation
It is recommended to update Mattermost to the latest version that addresses the sanitization of metadata in audit logs.
Original NVD description (English source)
Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged