CVE-2023-4108

Published: Aug 11, 2023
Updated: May 10, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-4108" target="_blank" rel="noopener"> CVE-2023-4108
GHSA: <a href="https://github.com/advisories/GHSA-9rww-66w7-7vjx" target="_blank" rel="noopener"> GHSA-9rww-66w7-7vjx
Severity: High
Exploit:

Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged

CVSS v3:

CWEs:

Software	From	Fixed in
github.com/mattermost/mattermost-server/v6	-	7.8.8
github.com/mattermost/mattermost-server/v6	7.9.0	7.9.6
github.com/mattermost/mattermost-server/v6	7.10.0	7.10.4
mattermost / mattermost	7.10.0	7.10.4
mattermost / mattermost	7.9.0	7.9.6
mattermost / mattermost	7.8.0	7.8.8