CVE-2022-1548
Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
Summary
Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
Original description
The description as published by the source.
Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com