CVE Vulnerabilities

CVE-2023-4108

Insertion of Sensitive Information into Log File

Published: Aug 11, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Mattermost Mattermost 7.8.0 (including) 7.8.8 (excluding)
Mattermost Mattermost 7.9.0 (including) 7.9.6 (excluding)
Mattermost Mattermost 7.10.0 (including) 7.10.4 (excluding)

Potential Mitigations

References