CVE-2023-3587
Inconsistent state in UI after boards permission change by system admin
Résumé
Inconsistent state in UI after boards permission change by system admin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com