← CVE Intelligence

CVE-2023-49607

Playbook plugin crash via missing interface type assertion PUBLISHED

Description (CNA)

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 8.1.5; affected 0 through 9.0.3; affected 0 through 9.1.2; affected 0 through 9.2.1; unaffected 9.2.2; unaffected 8.1.6; unaffected 9.0.4; unaffected 9.1.3

CWE

CWE-754

References

ADP enrichment

CVE

No English description supplied.