CVE-2023-2784
Apps Framework allows install requests from regular members via an internal path
Résumé
Apps Framework allows install requests from regular members via an internal path
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com