CVE-2023-45316

Summary

CVE-2023-45316 is a vulnerability affecting Mattermost that allows path traversal attacks. The issue lies in the way Mattermost handles telemetry run IDs in the /plugins/playbooks/api/v0/telemetry/run/<telem_run_ID> endpoint. An attacker can exploit this vulnerability by providing a relative path as a telemetry run ID, potentially leading to a CSRF attack by manipulating the request to point to a different endpoint.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.