CVE-2023-7114 : Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which al

Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.

Published 2023-12-29 13:15:12

Updated 2024-01-05 04:56:37

Source Mattermost, Inc.

View at NVD, CVE.org

Vulnerability category: Directory traversalCross-site request forgery (CSRF)

Products affected by CVE-2023-7114

Mattermost » Mattermost » For Android
Versions before (<) 2.10.1
cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:android:*:*
Matching versions
Mattermost » Mattermost » For Iphone Os
Versions before (<) 2.10.1
cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:iphone_os:*:*
Matching versions

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST	2024-01-05
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L	1.3	5.3	Mattermost, Inc.
Attack Vector: Network Attack Complexity: High Privileges Required: Low User Interaction: Required Scope: Changed Confidentiality: Low Integrity: High Availability: Low

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Assigned by: nvd@nist.gov (Primary)
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Assigned by: responsibledisclosure@mattermost.com (Secondary)

Jump to