CVE-2023-48732

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-48732

Severity

4.3

Medium

CVSS V3

Description

Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.

References

https://images.chainguard.dev/security/CGA-84gg-72g9-v689
https://github.com/advisories/GHSA-q7rx-w656-fwmv
https://images.chainguard.dev/security/CGA-ggp9-vp84-whpc
https://images.chainguard.dev/security/CGA-gmj3-fwh6-qxc3
https://images.chainguard.dev/security/CGA-3ccq-q4hh-w64f
https://images.chainguard.dev/security/CGA-9qrw-gg77-v895
https://images.chainguard.dev/security/CGA-2jqv-qqmp-35gq
https://images.chainguard.dev/security/CGA-jhcr-g7wj-9vq2
https://images.chainguard.dev/security/CGA-wwwj-jp9r-cv3x
https://images.chainguard.dev/security/CGA-3772-fxmh-5p95
https://images.chainguard.dev/security/CGA-8vx4-48f6-fpwh
https://images.chainguard.dev/security/CGA-62jj-jmxm-hr9j
https://images.chainguard.dev/security/CGA-j66j-pgcj-2cxg
https://mattermost.com/security-updates

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal