CVE-2023-45316

Reflected client side path traversal leading to CSRF in Playbooks

State: Published
Severity: 7.3 High
Published: Dec 12, 2023
Updated: May 24, 2025
Reserved: Dec 5, 2023

Description

Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a telemetry run ID, allowing an attacker to use a path traversal payload that points to a different endpoint leading to a CSRF attack.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H	Mattermost

Weaknesses

CWE-352 Cross-Site Request Forgery (CSRF)

Affected Products

Product	Versions
MattermostMattermost	9.1.2 and earlierAffected 9.0.3 and earlierAffected 8.1.5 and earlierAffected 7.8.14 and earlierAffected 9.2.1 and earlierAffected 8.1.6Not affected 9.0.4Not affected 9.1.3Not affected 9.2.2Not affected 7.8.15Not affected

References

https://mattermost.com/security-updates

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.