Lucene search
HistoryAug 11, 2023 - 7:15 a.m.
CVE-2023-4107
mattermost
permission validation
vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.0005 Low
EPSS
Percentile
16.0%
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin’s details such as email, first name and last name.
Affected configurations
Node
mattermostmattermostRange7.8.0–7.8.8
ORmattermostmattermostRange7.9.0–7.9.6
ORmattermostmattermostRange7.10.0–7.10.4
References
Related
cve
cve
CVE-2023-4107
2023-08-11 07:15:09
osv
osv
CVE-2023-4107
2023-08-11 07:15:09
prion
prion
Code injection
2023-08-11 07:15:00
veracode
veracode
Incorrect Authorization
2023-08-15 02:55:13
cvelist
cvelist
github
github
nessus
nessus
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
0.0005 Low
EPSS
Percentile
16.0%
Related for NVD:CVE-2023-4107