CVE-2023-1831: User password logged in audit logs
7.2
CVSS
Description
Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config).
Classification
CVE ID: CVE-2023-1831
CVSS Base Severity: HIGH
CVSS Base Score: 7.2
Affected Products
Vendor: Mattermost
Product: Mattermost
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.12% (probability of being exploited)
EPSS Percentile: 46.7% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)