Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://mattermost.com/security-updates |
History
No history.
MITRE
Status: PUBLISHED
Assigner: Mattermost
Published: 2023-06-16T08:41:59.270Z
Updated: 2024-08-02T06:33:05.794Z
Reserved: 2023-05-18T10:27:20.883Z
Link: CVE-2023-2784
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-06-16T09:15:09.787
Modified: 2023-06-23T19:38:31.707
Link: CVE-2023-2784
Redhat
No data.