CVE-2023-47865
Username and Icon override can be used by members when Hardened Mode is enabled
概要
Username and Icon override can be used by members when Hardened Mode is enabled
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com