Опубликовано: 02 янв. 2024
Источник: github
Github: Прошло ревью
CVSS4: 2.1
CVSS3: 3.7
Описание
Mattermost allows demoted guests to change group names
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.
Пакеты
Наименование
github.com/mattermost/mattermost/server/v8
go
Затронутые версииВерсия исправления
<= 8.1.6
8.1.7
Связанные уязвимости
CVSS3: 3.7
nvd
около 2 лет назад
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.
CVSS3: 3.7
debian
около 2 лет назад
Mattermost fails to update the permissions of the current session for ...