CVE-2023-50333
Lack of restriction to manage group names for freshly demoted guests
Résumé
Lack of restriction to manage group names for freshly demoted guests
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com