CVE-2023-3587 — Inconsistent state in UI after boards permission change by system admin

CVE-2023-3587

Inconsistent state in UI after boards permission change by system admin PUBLISHED

Description (CNA)

Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 7.8.6; affected 0 through 7.9.4; affected 0 through 7.10.2; unaffected 7.8.7; unaffected 7.9.5; unaffected 7.10.3

CWE

CWE-862

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.