CVE-2023-1775 (published 2023-03-31T11:26:21.640Z)
When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast to all users, leading to disclosure of sensitive information to some of the users with currently connected Websocket clients.



Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 3.3.0, 3.3.0, 3.3.0, 7.8.0, 7.7.2, 7.1.6