Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.
2023-07-17T16:15:10.410
2024-11-21T08:17:35.923
Modified
CVSSv3.1: 6.2 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mattermost | mattermost_server | < 7.8.7 | Yes |
| Application | mattermost | mattermost_server | < 7.9.5 | Yes |
| Application | mattermost | mattermost_server | < 7.10.3 | Yes |