CVE-2023-3581 Information

Description

Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to access the websocket APIs.

Reference

https://mattermost.com/security-updates