Design/Logic Flaw

2023-02-2715:15:00

PRIOn knowledge base

www.prio-n.com

mattermost

playbooks

permissions_check

api

modification

flaw

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.

CPENameOperatorVersion
mattermosteq7.5.0
mattermosteq7.5.1
mattermosteq7.4.0
mattermostle7.1.4

Name	Operator	Version
mattermost	eq	7.5.0
mattermost	eq	7.5.1
mattermost	eq	7.4.0
mattermost	le	7.1.4

References

mattermost.com/security-updates/