CVE-2023-3590: Deleted attachments in Boards remain accessible
Published Jul 17, 2023
·Updated
Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments.
Affected Software
1 affected component
Mattermost Mattermost Server>=7.10.0<7.10.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mattermost Serverto a version that resolves this vulnerability.Fixed in v7.10.3
Event History
Jul 17, 2023
CVE Published
via MITRE·03:28 PM
Data Sourced
via MITRE·03:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
04:15 PM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-3590?
CVE-2023-3590 is a vulnerability in Mattermost that allows an attacker to access deleted attachments in Boards.
2
How does the Mattermost vulnerability CVE-2023-3590 occur?
The vulnerability occurs due to the failure of Mattermost to delete card attachments in Boards.
3
What is the severity of CVE-2023-3590?
CVE-2023-3590 has a severity rating of 7.5 (high).
4
Which versions of Mattermost are affected by CVE-2023-3590?
Mattermost Server versions 7.10.0 to 7.10.3 are affected by CVE-2023-3590.
5
Is there a fix available for Mattermost vulnerability CVE-2023-3590?
Yes, Mattermost has released a security update to fix the vulnerability. Please refer to the Mattermost Security Updates page for more information.