← CVE Intelligence

CVE-2023-2791

Playbooks lets you edit arbitrary posts PUBLISHED

Description (CNA)

When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel post.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 before 7.9.2; affected 0 before 7.8.3; affected 0 before 7.7.4; affected 0 before 7.10.1; unaffected 7.9.2; unaffected 7.8.3; unaffected 7.7.4; unaffected 7.10.1

CWE

CWE-862

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.