CVE-2023-2193 in Mattermost

Sumário

de MITRE • 20/04/2023

Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Mattermost, Inc.
• Reservar: 20/04/2023
• Divulgação: 20/04/2023
• Moderação: aceite
• Entrada: VDB-226929
• CPE: pronto
• CWE: CWE-862 (confirmado)
• CVSS: 9.1 (NVD)
• EPSS: 0.00590
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-2193
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-2193
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-2193/