CVE-2023-5968 (published 2023-11-06T15:35:14.094Z)
Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being included in the response body. 


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 0, 7.8.12, 8.0.4, 8.1.3, 9.0.1