← CVE Intelligence

CVE-2023-2515

Privilege escalation to system admin via personal access tokens PUBLISHED

Description (CNA)

Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 7.1.7; affected 0 through 7.7.3; affected 0 through 7.8.2; affected 0 through 7.9.1; unaffected 7.1.8; unaffected 7.7.4; unaffected 7.8.3; unaffected 7.9.2

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.