Количество 3
Количество 3
CVE-2022-2408
The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels.
CVE-2022-2408
The Guest account feature in Mattermost version 6.7.0 and earlier fail ...
GHSA-3q29-6c6h-84hh
The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-2408 The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| CVE-2022-2408 The Guest account feature in Mattermost version 6.7.0 and earlier fail ... | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
| GHSA-3q29-6c6h-84hh The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels. | CVSS3: 4.3 | 0% Низкий | почти 3 года назад |
Уязвимостей на страницу