Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8m2w-p6c5-hh6c

Опубликовано: 16 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.

Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.

EPSS

Процентиль: 35%
0.00141
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
около 2 лет назад

Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.

CVSS3: 6.5
debian
около 2 лет назад

Mattermost fails to check channel membership when accessing message th ...

EPSS

Процентиль: 35%
0.00141
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862