CVE-2024-31859
Member promoted to channel admin via playbooks run linking to channel
Summary
Member promoted to channel admin via playbooks run linking to channel
Original description
The description as published by the source.
Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper authorization checks which allows a member running a playbook in an existing channel to be promoted to a channel admin
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com