CVE-2023-3577

Summary

CVE-2023-3577 is a vulnerability affecting Mattermost that allows for a limited blind Server-Side Request Forgery (SSRF) attack. The issue arises from the application's failure to adequately restrict requests to localhost/intranet during interactive dialogs. An attacker can exploit this vulnerability by manipulating the dialog to make unauthorized requests, potentially leading to the disclosure of internal information or access to restricted resources within the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.