tocsin

CVE-2023-48732

6 advisories.

Go/github.com/mattermost/mattermost/server/v8 CVE-2023-48732: medium 4.3, EPSS 0.46%

Mattermost notified all users in the channel when using WebSockets to respond individually

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.1.7 or later.

go get github.com/mattermost/mattermost/server/v8@v8.1.7

Affected

introducedfixedlast affected
08.1.7-

Fixed versions

8.1.7

Sources

CVE-2023-48732 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2023-48732: medium 4.3, EPSS 0.46%

Mattermost notified all users in the channel when using WebSockets to respond individually

Action: Upgrade github.com/mattermost/mattermost-server/v6 to 8.1.7 or later.

go get github.com/mattermost/mattermost-server/v6@v8.1.7

Affected

introducedfixedlast affected
08.1.7-

Fixed versions

8.1.7

Sources

CVE-2023-48732 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2023-48732: unknown, EPSS 0.46%

Mattermost notified all users in the channel when using WebSockets to respond individually in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 8.1.7+incompatible or later.

go get github.com/mattermost/mattermost-server@v8.1.7+incompatible

Affected

introducedfixedlast affected
08.1.7+incompatible-

Fixed versions

8.1.7+incompatible

Sources

CVE-2023-48732 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2023-48732: unknown, EPSS 0.46%

Mattermost notified all users in the channel when using WebSockets to respond individually in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-48732 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2023-48732: unknown, EPSS 0.46%

Mattermost notified all users in the channel when using WebSockets to respond individually in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-48732 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2023-48732: unknown, EPSS 0.46%

Mattermost notified all users in the channel when using WebSockets to respond individually in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2023-48732 · published · modified · JSON