Lucene search
HistoryDec 12, 2023 - 9:15 a.m.
CVE-2023-46701
mattermost
playbooks
authorization bypass
cve-2023-46701
endpoint security
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
17.0%
Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin allowing an attacker to get limited information about a post if they know the post ID
Affected configurations
Node
mattermostmattermost_serverRange≤7.8.14
ORmattermostmattermost_serverRange8.0.0–8.1.5
ORmattermostmattermost_serverRange9.0.0–9.0.3
ORmattermostmattermost_serverRange9.1.1–9.1.2
ORmattermostmattermost_serverRange9.2.0–9.2.1
References
Related
osv
osv
CVE-2023-46701
2023-12-12 09:15:08
BIT-mattermost-2023-46701
2024-03-06 10:58:47
cve
cve
CVE-2023-46701
2023-12-12 09:15:08
cvelist
cvelist
CVE-2023-46701 Inaccessible Post Information Leak via Run Timeline IDOR
2023-12-12 08:19:22
veracode
veracode
Authorization Bypass
2024-03-18 17:42:19
prion
prion
Authorization
2023-12-12 09:15:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2023-46701