Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://mattermost.com/security-updates |
History
No history.
MITRE
Status: PUBLISHED
Assigner: Mattermost
Published: 2023-08-11T06:12:21.977Z
Updated: 2024-08-02T07:17:12.064Z
Reserved: 2023-08-02T15:27:32.294Z
Link: CVE-2023-4107
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-11T07:15:09.963
Modified: 2023-08-15T20:19:59.237
Link: CVE-2023-4107
Redhat
No data.