CVE-2023-50333
Lack of restriction to manage group names for freshly demoted guests
概要
Lack of restriction to manage group names for freshly demoted guests
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com