← Database

CVE-2023-2193

MEDIUM CVSS: 6.5 Published: 2023-04-20 Modified: 2026-06-17

Description

Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate an access token.

Affected Platforms

Mattermost Mattermost

Weakness Type

CWE-862, CWE-862

References