CVE-2023-4106
A guest user can perform various actions on public playbooks
Résumé
A guest user can perform various actions on public playbooks
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com