Medium severity6.5NVD Advisory· Published Jun 16, 2023· Updated Jun 17, 2026
CVE-2023-2792
CVE-2023-2792
Description
Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
40+ 3 more
- (no CPE)range: 0
- (no CPE)
- cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*range: >=7.1.0,<=7.1.9
- cpe:2.3:a:mattermost:mattermost:7.10.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- mattermost.com/security-updates/nvdVendor Advisory
News mentions
0No linked articles in our index yet.