CVE-2024-31859
Member promoted to channel admin via playbooks run linking to channel
Résumé
Member promoted to channel admin via playbooks run linking to channel
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper authorization checks which allows a member running a playbook in an existing channel to be promoted to a channel admin
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com