CVE-2023-4108 MEDIUM

CVE-2023-4108: Audit logging fails to sanitize post metadata

Vendor Mattermost
Product Mattermost
Weakness CWE-532 · Sensitive info in logs
Published August 11, 2023
Last update October 3, 2024
View on NVD All CVEs

CVSS base score

4.5/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged

Key dates

02Disclosure timeline

August 11, 2023 CVE published
October 3, 2024 Record updated