Lucene search

CVE-2023-5193 System Role with manage posts permission can read posts of Direct Messages

🗓️ 29 Sep 2023 09:47:23Reported by MattermostType

Mattermost CVE-2023-5193 Post Read Permission Issu

Reporter	Title	Published	Views	Family All 9
OSV	Mattermost Incorrect Authorization vulnerability	29 Sep 202312:30	–	osv
OSV	CVE-2023-5193	29 Sep 202310:15	–	osv
CVE	CVE-2023-5193	29 Sep 202310:15	–	cve
NVD	CVE-2023-5193	29 Sep 202310:15	–	nvd
Veracode	Privilege Escalation	11 Oct 202315:03	–	veracode
Vulnrichment	CVE-2023-5193 System Role with manage posts permission can read posts of Direct Messages	29 Sep 202309:23	–	vulnrichment
Prion	Design/Logic Flaw	29 Sep 202310:15	–	prion
Github Security Blog	Mattermost Incorrect Authorization vulnerability	29 Sep 202312:30	–	github
Tenable Nessus	Mattermost Server < 7.8.10 / 8.0.x < 8.0.2 / 8.1.0 Multiple Vulnerabilities (MMSA-2023-00222) (MMSA-2023-00224) (MMSA-2023-00230)	5 Oct 202300:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "8.0.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "7.8.9",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.1.0"
      },
      {
        "status": "unaffected",
        "version": "8.0.2"
      },
      {
        "status": "unaffected",
        "version": "8.1.1"
      },
      {
        "status": "unaffected",
        "version": "7.8.10"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Sep 2023 09:23Current

5.4Medium risk

Vulners AI Score5.4

CVSS34.9

EPSS0.001

CWE-863