CVE-2022-1548 — Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.

CVE-2022-1548

Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins. PUBLISHED

Description (CNA)

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost Playbooks	affected Playbooks through 1.25

CWE

CWE-264

References

https://mattermost.com/security-updates/

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/

CISA-ADP

No English description supplied.

No references supplied.