Security Advisory
CVE-2023-45316
7.3
HIGH
Vulnerability Description
Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/ as a telemetry run ID, allowing an attacker to use a path traversal payload that points to a different endpoint leading to a CSRF attack.
Published Date
December 12, 2023
Official Source
NIST NVD Advisory