CVE-2023-3613 — Guest accounts invited and added to channels by Welcomebot plugin

CVE-2023-3613

Guest accounts invited and added to channels by Welcomebot plugin PUBLISHED

Description (CNA)

Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost Plugins	affected 0 through 7.8.5; affected 0 through 7.10.2; unaffected 7.8.6; unaffected 7.10.3

CWE

CWE-863

References

https://mattermost.com/security-updates

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates

CISA-ADP

No English description supplied.

No references supplied.