CVE-2023-5920 Lack Of Secure Keyboard Entry Protection in MacOS Desktop

What is CVE-2023-5920?

CVE-2023-5920 is a low-severity vulnerability in Mattermost Desktop, published on 2 Nov 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Mattermost Desktop for MacOS fails to utilize the secure keyboard input functionality provided by macOS, allowing for other processes to read the keyboard input.

Weakness: CWE-200

Which versions are affected by CVE-2023-5920?

It affects 1 product.

Products include Mattermost Mattermost Desktop.

How do I fix CVE-2023-5920?

No fix has been published for CVE-2023-5920 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-5920 being exploited?

There is no known exploitation of CVE-2023-5920 in the wild and no public exploit code.

Other vulnerabilities in Mattermost Desktop

• CVE-2016-11064 Code injection in n/a Critical 9.8
• CVE-2019-20856 Code injection in n/a Critical 9.8
• CVE-2019-20861 Code injection in n/a High 8.8
• CVE-2026-1046 Arbitrary application execution via unvalidated server-controlled URLs in Help menu High 7.6
• CVE-2020-14456 Security feature bypass in n/a High 7.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wrhx-9jgw-g8cj.