CVE-2023-3577 (published 2023-07-17T15:18:07.871Z)
Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SSRF.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.8.7, 7.10.3