CVE-2023-5968 — Password hash in response body after username update

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 

Published: 2023-11-06 · CVSS: 4.9 · CVSS 3.1

Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7