CVE-2023-50333
Lack of restriction to manage group names for freshly demoted guests
Summary
Lack of restriction to manage group names for freshly demoted guests
Original description
The description as published by the source.
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com