CVE-2023-47168: Mattermost Open Redirect vulnerability
4.3
CVSS Score
3.1
Basic Information
CVE ID
GHSA ID
EPSS Score
0.35926%
CWE
Published
11/27/2023
Updated
11/28/2023
KEV Status
No
Technology
Go
GoTechnical Details
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/mattermost/mattermost/server/v8 | go | >= 9.1.0, < 9.1.1 | 9.1.1 |
| github.com/mattermost/mattermost/server/v8 | go | >= 9.0.0, < 9.0.2 | 9.0.2 |
| github.com/mattermost/mattermost/server/v8 | go | < 8.1.4 | 8.1.4 |
| github.com/mattermost/mattermost-server/v6 | go | < 7.8.13 | 7.8.13 |
Vulnerability Intelligence
Miggo AI
Miggo AIRoot Cause Analysis
The vulnerability occurs in the OAuth mobile login flow where the redirect_to parameter is improperly validated. The mobileLoginHandler would be responsible for processing this parameter and generating redirect responses. The advisory specifically mentions the /oauth/{service}/mobile_login endpoint and improper validation when custom URL schemes fail, indicating the handler function for this route is where the insecure redirect occurs. While exact code isn't available, the endpoint structure and vulnerability pattern strongly suggest this is the vulnerable function.