CVE-2023-5339mediumCWE-200

Mattermost Desktop logs all keystrokes during initial run after fresh installation

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.7epss 0.1%

probabilidade de exploração

0.1%top 96% das CVEs

exploração observada

nãonenhuma fonte reporta

Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation resulting in logging all keystrokes including password entry being logged.

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Produtos afetados

Mattermost · Mattermost

Referências

https://mattermost.com/security-updates