CVE-2023-2784
Apps Framework allows install requests from regular members via an internal path
Summary
Apps Framework allows install requests from regular members via an internal path
Original description
The description as published by the source.
Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com