CVE-2023-5193

Summary

CVE-2023-5193 is a vulnerability affecting Mattermost, an open-source collaboration platform. The issue arises due to insufficient permission checks when retrieving a post. An attacker can exploit this flaw to gain unauthorized access to the Direct Message (DM) conversations of a System Role, which holds the permission to manage channels. This vulnerability poses a significant risk, enabling unauthenticated users to read sensitive information exchanged in DM conversations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.