CVE-2023-2515
Privilege escalation to system admin via personal access tokens
Summary
Privilege escalation to system admin via personal access tokens
Original description
The description as published by the source.
Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com