Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8jf2-78m7-7f8v

Опубликовано: 16 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps.

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing install requests to the Apps allowing a regular user send install requests to the Apps.

EPSS

Процентиль: 19%
0.00058
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.2
nvd
около 2 лет назад

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.

CVSS3: 4.2
debian
около 2 лет назад

Mattermost fails to verify if the requestor is a sysadmin or not, befo ...

EPSS

Процентиль: 19%
0.00058
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-862