CVE-2023-46701
Inaccessible Post Information Leak via Run Timeline IDOR
概要
Inaccessible Post Information Leak via Run Timeline IDOR
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin allowing an attacker to get limited information about a post if they know the post ID
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com