CVE-2023-50333lowCWE-284

Lack of restriction to manage group names for freshly demoted guests

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.7epss 0.3%

probabilidade de exploração

0.3%top 75% das CVEs

exploração observada

nãonenhuma fonte reporta

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L

Produtos afetados

Mattermost · Mattermost

Referências

https://mattermost.com/security-updates