CVE-2023-2784
Apps Framework allows install requests from regular members via an internal path
概要
Apps Framework allows install requests from regular members via an internal path
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com