CVE-2023-48732 (published 2024-01-02T09:52:01.147Z)
Mattermost fails to scope the WebSocket response around notified users to a each user separately resulting in the WebSocket broadcasting the information about who was notified about a post to everyone else in the channel.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 8.1.7