Author: Angelo Barbosa

CVE-2023-43754 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Permalink information disclosure

A vulnerability was found in Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0. It has been classified as problematic. This affects an unknown part of the component Permalink Handler. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2023-43754. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-48268 | Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 Zip resource consumption

A vulnerability was found in Mattermost up to 7.8.12/8.1.3/9.0.1/9.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Zip Handler. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2023-48268. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-49312 | Precision Bridge PrecisionBridge.exe up to 7.3.20 License Key integrity check

A vulnerability classified as problematic was found in Precision Bridge PrecisionBridge.exe up to 7.3.20. This vulnerability affects unknown code of the component License Key Handler. The manipulation leads to improper validation of integrity check value. This vulnerability was named CVE-2023-49312. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected...

Read More