Lucene search
PRIOn knowledge basePRION:CVE-2023-6547HistoryDec 12, 2023 - 9:15 a.m.
Code injection
2023-12-1209:15:00
PRIOn knowledge base
www.prio-n.com
4
mattermost
code injection
unauthorized access
playbook
team membership validation
Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions to a playbook but no permissions to the team the playbook is on to access and modify the playbook. This can happen if the user was once a member of the team, got permissions to the playbook and was then removed from the team.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost_server | ge | 9.2.0 | |
| mattermost_server | le | 9.2.1 | |
| mattermost_server | le | 8.1.5 |
References
Related
nvd
nvd
CVE-2023-6547
2023-12-12 09:15:09
osv
osv
BIT-mattermost-2023-6547
2024-03-06 10:56:43
CVE-2023-6547
2023-12-12 09:15:09
cve
cve
CVE-2023-6547
2023-12-12 09:15:09
veracode
veracode
Improper Access Control
2023-12-13 07:29:18
cvelist
cvelist
CVE-2023-6547 Playbooks access/modification by removed team member
2023-12-12 08:22:41