7.5
CVE-2023-4108
- EPSS 0.2%
- Veröffentlicht 11.08.2023 07:15:10
- Zuletzt bearbeitet 21.11.2024 08:34:24
- Quelle responsibledisclosure@mattermo
- CVE-Watchlists
- Unerledigt
LoginAudit logging fails to sanitize post metadata
Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mattermost ≫ Mattermost Version >= 7.8.0 < 7.8.8
Mattermost ≫ Mattermost Version >= 7.9.0 < 7.9.6
Mattermost ≫ Mattermost Version >= 7.10.0 < 7.10.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.415 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| responsibledisclosure@mattermost.com | 4.5 | 0.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
|
CWE-532 Insertion of Sensitive Information into Log File
The product writes sensitive information to a log file.