cbcvebase.
CVE-2023-3585
published 2023-07-17

CVE-2023-3585: Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.

medium4.3CVSS 3.1
AVNACLPRLUINSUCNINAL
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.

Affected

4 ranges
VendorProductVersion rangeFixed in
mattermostmattermost<= 7.8.6
mattermostmattermost_server< 7.8.77.8.7
mattermostmattermost_server>= 7.10.0 < 7.10.37.10.3
mattermostmattermost_server>= 7.9.0 < 7.9.57.9.5