CVEDB API

Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.3%

CVSS Severity

CVSS v3 Score 6.2

References

Products affected by CVE-2023-3581

Mattermost » Mattermost Server » Version: 7.10.0

cpe:2.3:a:mattermost:mattermost_server:7.10.0
Mattermost » Mattermost Server » Version: 7.10.1

cpe:2.3:a:mattermost:mattermost_server:7.10.1
Mattermost » Mattermost Server » Version: 7.10.2

cpe:2.3:a:mattermost:mattermost_server:7.10.2
Mattermost » Mattermost Server » Version: 7.8.0

cpe:2.3:a:mattermost:mattermost_server:7.8.0
Mattermost » Mattermost Server » Version: 7.8.1

cpe:2.3:a:mattermost:mattermost_server:7.8.1
Mattermost » Mattermost Server » Version: 7.8.2

cpe:2.3:a:mattermost:mattermost_server:7.8.2
Mattermost » Mattermost Server » Version: 7.8.3

cpe:2.3:a:mattermost:mattermost_server:7.8.3
Mattermost » Mattermost Server » Version: 7.8.4

cpe:2.3:a:mattermost:mattermost_server:7.8.4
Mattermost » Mattermost Server » Version: 7.8.5

cpe:2.3:a:mattermost:mattermost_server:7.8.5
Mattermost » Mattermost Server » Version: 7.8.6

cpe:2.3:a:mattermost:mattermost_server:7.8.6
Mattermost » Mattermost Server » Version: 7.9.0

cpe:2.3:a:mattermost:mattermost_server:7.9.0
Mattermost » Mattermost Server » Version: 7.9.1

cpe:2.3:a:mattermost:mattermost_server:7.9.1
Mattermost » Mattermost Server » Version: 7.9.2

cpe:2.3:a:mattermost:mattermost_server:7.9.2
Mattermost » Mattermost Server » Version: 7.9.3

cpe:2.3:a:mattermost:mattermost_server:7.9.3
Mattermost » Mattermost Server » Version: 7.9.4

cpe:2.3:a:mattermost:mattermost_server:7.9.4