Lucene search

CVE-2023-47865 Username and Icon override can be used by members when Hardened Mode is enabled

🗓️ 27 Nov 2023 09:19:05Reported by MattermostType

Username and Icon override vulnerability in Hardened Mode

Reporter	Title	Published	Views	Family All 11
Prion	Code injection	27 Nov 202309:15	–	prion
OSV	Mattermost Improper Access Control vulnerability	27 Nov 202312:30	–	osv
OSV	CGA-mrwm-8v2c-77gj	25 Sep 202402:09	–	osv
OSV	CGA-82fr-vcch-9r64	25 Sep 202401:52	–	osv
OSV	CGA-j9gv-2c87-fw96	15 Jul 202422:01	–	osv
OSV	CVE-2023-47865	27 Nov 202309:15	–	osv
OSV	CGA-hhh7-pj87-q6qw	24 Jun 202414:34	–	osv
Veracode	Improper Access Control	28 Nov 202310:51	–	veracode
CVE	CVE-2023-47865	27 Nov 202309:15	–	cve
Github Security Blog	Mattermost Improper Access Control vulnerability	27 Nov 202312:30	–	github

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "8.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "7.8.12",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "7.8.13"
      },
      {
        "status": "unaffected",
        "version": "8.1.4"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Nov 2023 09:05Current

4.8Medium risk

Vulners AI Score4.8

EPSS0.001

CWE-284