CVE-2023-3581
MEDIUMMattermost - SSRF
Title source: llmDescription
Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
References (1)
Scores
CVSS v3
6.2
EPSS
0.0014
EPSS Percentile
33.9%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-346
Status
published
Affected Products (1)
mattermost/mattermost_server
< 7.8.7
Timeline
Published
Jul 17, 2023
Tracked Since
Feb 18, 2026