CVE-2023-7114 HIGH

CVE-2023-7114

Vendor Mattermost
Product Mattermost
Weakness CWE-74
Published December 29, 2023
Last update September 9, 2024
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L

What the vulnerability does

01Description

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.

Key dates

02Disclosure timeline

December 29, 2023 CVE published
September 9, 2024 Record updated