CVE-2023-2786
Channel commands execution doesn't properly verify permissions
Résumé
Channel commands execution doesn't properly verify permissions
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com