Описание
Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/member_count API resulting in channel member counts being leaked to a user without permissions.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mattermost-server | itp | package |
EPSS
Процентиль: 38%
0.00162
Низкий
Связанные уязвимости
CVSS3: 3.1
nvd
почти 2 года назад
Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/member_count API resulting in channel member counts being leaked to a user without permissions.
CVSS3: 3.1
github
почти 2 года назад
Mattermost fails to check the required permissions
EPSS
Процентиль: 38%
0.00162
Низкий