CVE-2023-3613
Guest accounts invited and added to channels by Welcomebot plugin
Summary
Guest accounts invited and added to channels by Welcomebot plugin
Original description
The description as published by the source.
Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com