CVE-2022-1548
Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
Résumé
Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com