CVE-2023-3587
Inconsistent state in UI after boards permission change by system admin
Summary
Inconsistent state in UI after boards permission change by system admin
Original description
The description as published by the source.
Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com