CVEDB API

Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 42.3%

CVSS Severity

CVSS v3 Score 4.8

References

Products affected by CVE-2023-3591

Mattermost » Mattermost Server » Version: 7.10.0

cpe:2.3:a:mattermost:mattermost_server:7.10.0
Mattermost » Mattermost Server » Version: 7.10.1

cpe:2.3:a:mattermost:mattermost_server:7.10.1
Mattermost » Mattermost Server » Version: 7.10.2

cpe:2.3:a:mattermost:mattermost_server:7.10.2
Mattermost » Mattermost Server » Version: 7.8.0

cpe:2.3:a:mattermost:mattermost_server:7.8.0
Mattermost » Mattermost Server » Version: 7.8.1

cpe:2.3:a:mattermost:mattermost_server:7.8.1
Mattermost » Mattermost Server » Version: 7.8.2

cpe:2.3:a:mattermost:mattermost_server:7.8.2
Mattermost » Mattermost Server » Version: 7.8.3

cpe:2.3:a:mattermost:mattermost_server:7.8.3
Mattermost » Mattermost Server » Version: 7.8.4

cpe:2.3:a:mattermost:mattermost_server:7.8.4
Mattermost » Mattermost Server » Version: 7.8.5

cpe:2.3:a:mattermost:mattermost_server:7.8.5
Mattermost » Mattermost Server » Version: 7.8.6

cpe:2.3:a:mattermost:mattermost_server:7.8.6
Mattermost » Mattermost Server » Version: 7.9.0

cpe:2.3:a:mattermost:mattermost_server:7.9.0
Mattermost » Mattermost Server » Version: 7.9.1

cpe:2.3:a:mattermost:mattermost_server:7.9.1
Mattermost » Mattermost Server » Version: 7.9.2

cpe:2.3:a:mattermost:mattermost_server:7.9.2
Mattermost » Mattermost Server » Version: 7.9.3

cpe:2.3:a:mattermost:mattermost_server:7.9.3
Mattermost » Mattermost Server » Version: 7.9.4

cpe:2.3:a:mattermost:mattermost_server:7.9.4