CVE-2022-1548

2022-05-0321:15:08

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.8%

JSON

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.

CPENameOperatorVersion
mattermost-plugin-playbookseq1.3.0
mattermost-plugin-playbookseq1.25.0-rc3
mattermost-plugin-playbookseq1.13.0
mattermost-plugin-playbookseq0.6.0
mattermost-plugin-playbookseq1.0.0-alpha.1
mattermost-plugin-playbookseq0.3.0
mattermost-plugin-playbookseq1.1.1
mattermost-plugin-playbookseq1.13.0-alpha.1
mattermost-plugin-playbookseq1.23.0+alpha.1
mattermost-plugin-playbookseq1.18.0-alpha.2

Name	Operator	Version
mattermost-plugin-playbooks	eq	1.3.0
mattermost-plugin-playbooks	eq	1.25.0-rc3
mattermost-plugin-playbooks	eq	1.13.0
mattermost-plugin-playbooks	eq	0.6.0
mattermost-plugin-playbooks	eq	1.0.0-alpha.1
mattermost-plugin-playbooks	eq	0.3.0
mattermost-plugin-playbooks	eq	1.1.1
mattermost-plugin-playbooks	eq	1.13.0-alpha.1
mattermost-plugin-playbooks	eq	1.23.0+alpha.1
mattermost-plugin-playbooks	eq	1.18.0-alpha.2

Rows per page:

1-10 of 961

References

mattermost.com/security-updates/