CVE-2023-2193 (published 2023-04-20T08:17:04.731Z)
Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token.

Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 0, 7.10, 7.9.3, 7.8.4, 7.7.5, 7.1.9