CVE-2023-2786
Channel commands execution doesn't properly verify permissions
Summary
Channel commands execution doesn't properly verify permissions
Original description
The description as published by the source.
Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com