CVE-2023-3587lowCWE-862

Inconsistent state in UI after boards permission change by system admin

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.7epss 0.4%

probabilidade de exploração

0.4%top 63% das CVEs

exploração observada

nãonenhuma fonte reporta

Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Produtos afetados

Mattermost · Mattermost

Referências

https://mattermost.com/security-updates