CVE-2023-3577 — Limited blind SSRF to localhost/intranet in interactive dialog implementation
Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF.
Published: 2023-07-17 · CVSS: 3.5 · CVSS 3.1
Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7