Unrated severityNVD Advisory· Published Jul 17, 2023· Updated Oct 30, 2024
WebSockets accept connections from HTTPS origin
CVE-2023-3581
Description
Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
Affected products
1- Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.