CVE-2023-1831

    Dashboard / Vulnerabilities / CVE-2023-1831

    CVE-2023-1831

    Published: 17 Apr 2023Last Modified: 12 Aug 2026

    Summary: User password logged in audit logs

    Details: Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config).

    References: https://mattermost.com/security-updates/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1831.json, https://nvd.nist.gov/vuln/detail/CVE-2023-1831

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -975848b862e33caa1b8ce4db752bea1f0f15e258

    Affected versions

    7.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-1831 | CVE-DB