CVE-2023-2793: 
Mattermost vulnerability analysis and mitigation

Mattermost fails to validate links on external websites when constructing a preview for a linked website, identified as CVE-2023-2793. The vulnerability affects Mattermost versions from 7.8.0 to 7.8.3, 7.9.0 to 7.9.2, and version 7.10.0. This security issue was discovered and reported to Mattermost, Inc. (NVD).

The vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption) with a CVSS v3.1 Base Score of 6.5 (Medium). The attack vector is network-based (AV:N) with low attack complexity (AC:L), requiring low privileges (PR:L) and no user interaction (UI:N). The scope is unchanged (S:U) with no impact on confidentiality (C:N) or integrity (I:N), but high impact on availability (A:H) (NVD).

When exploited, this vulnerability allows an attacker to cause a denial-of-service condition by linking to a specially crafted webpage in a message. The impact primarily affects the availability of the system while maintaining no direct impact on confidentiality or integrity (NVD).

Users should upgrade to a patched version of Mattermost beyond the affected versions (7.8.0-7.8.3, 7.9.0-7.9.2, and 7.10.0). Mattermost has addressed this vulnerability in subsequent releases (Vendor Advisory).