CVE-2023-1775 — Unsanitized events sent over Websocket to regular users in a High Availability environment
When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of…
Published: 2023-03-31 · CVSS: 4.3 · CVSS 3.1
When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7