CVE-2023-5193
System Role with manage posts permission can read posts of Direct Messages
概要
System Role with manage posts permission can read posts of Direct Messages
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com