CVE-2023-2515
Privilege escalation to system admin via personal access tokens
Résumé
Privilege escalation to system admin via personal access tokens
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com