CVE-2023-5968
MEDIUMMattermost - Exposure of Sensitive Information via User Object Sanitization Failure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-5968. PoCs published by Curtail-Inc.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2023-5968, an information leak vulnerability in a Flask-based team-chat API. The flaw is a missing sanitization in the PATCH /users/<id> endpoint, which returns the full user object including the bcrypt password hash, unlike the GET endpoints that properly sanitize the response.
Description
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body.
Exploits (1)
This repository contains a functional proof-of-concept for CVE-2023-5968, an information leak vulnerability in a Flask-based team-chat API. The flaw is a missing sanitization in the PATCH /users/<id> endpoint, which returns the full user object including the bcrypt password hash, unlike the GET endpoints that properly sanitize the response.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N