CVEDB API

Mattermost fails to properly validate markdown, allowing an attacker to crash the server via a specially crafted markdown input.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.7%

CVSS Severity

CVSS v3 Score 4.3

References

Products affected by CVE-2023-3593

Mattermost » Mattermost Server » Version: 7.10.0

cpe:2.3:a:mattermost:mattermost_server:7.10.0
Mattermost » Mattermost Server » Version: 7.10.1

cpe:2.3:a:mattermost:mattermost_server:7.10.1
Mattermost » Mattermost Server » Version: 7.10.2

cpe:2.3:a:mattermost:mattermost_server:7.10.2
Mattermost » Mattermost Server » Version: 7.8.0

cpe:2.3:a:mattermost:mattermost_server:7.8.0
Mattermost » Mattermost Server » Version: 7.8.1

cpe:2.3:a:mattermost:mattermost_server:7.8.1
Mattermost » Mattermost Server » Version: 7.8.2

cpe:2.3:a:mattermost:mattermost_server:7.8.2
Mattermost » Mattermost Server » Version: 7.8.3

cpe:2.3:a:mattermost:mattermost_server:7.8.3
Mattermost » Mattermost Server » Version: 7.8.4

cpe:2.3:a:mattermost:mattermost_server:7.8.4
Mattermost » Mattermost Server » Version: 7.8.5

cpe:2.3:a:mattermost:mattermost_server:7.8.5
Mattermost » Mattermost Server » Version: 7.8.6

cpe:2.3:a:mattermost:mattermost_server:7.8.6
Mattermost » Mattermost Server » Version: 7.9.0

cpe:2.3:a:mattermost:mattermost_server:7.9.0
Mattermost » Mattermost Server » Version: 7.9.1

cpe:2.3:a:mattermost:mattermost_server:7.9.1
Mattermost » Mattermost Server » Version: 7.9.2

cpe:2.3:a:mattermost:mattermost_server:7.9.2
Mattermost » Mattermost Server » Version: 7.9.3

cpe:2.3:a:mattermost:mattermost_server:7.9.3
Mattermost » Mattermost Server » Version: 7.9.4

cpe:2.3:a:mattermost:mattermost_server:7.9.4