CVE-2023-3585
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.
Risk Assessment
An attacker can disrupt the functionality of channels in Mattermost, leading to a loss of communication availability within the organization.
Recommendation
It is recommended to update Mattermost to the latest version that fixes the validation of board links.
Other vulnerabilities in Mattermost Boards
See all- CVE-2023-40703Medium
Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards. An attacker can patch a block field using a specially crafted string to consume excessive resources, possibly leading to Denial of Service.
- CVE-2023-3590Low
Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments.
Original NVD description (English source)
Mattermost Boards fail to properly validate a board link, allowing an attacker to crash a channel by posting a specially crafted boards link.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS