Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Webhook Secret Exposure via Timing attack in MSteams plugin
Vulnerability Description
Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugin webhook secret which allows an attacker to retrieve the webhook secret of the MSTeams plugin via a timing attack during webhook secret comparison.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
通过时间差异性导致的信息暴露
Vulnerability Title
Mattermost Plugin MSTeams 安全漏洞
Vulnerability Description
Mattermost Plugin MSTeams是美国Mattermost公司的一个Mattermost插件。 Mattermost Plugin MSTeams 2.1.0之前版本存在安全漏洞，该漏洞源于webhook密钥比较未使用恒定时间算法，可能导致密钥泄露。
CVSS Information
N/A
Vulnerability Type
N/A