Lucene search
PRIOn knowledge basePRION:CVE-2023-2786HistoryJun 16, 2023 - 9:15 a.m.
Command injection
2023-06-1609:15:00
PRIOn knowledge base
www.prio-n.com
4
mattermost
command injection
permission failure
channel commands
Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost | ge | 7.9.0 | |
| mattermost | le | 7.9.3 | |
| mattermost | ge | 7.8.0 | |
| mattermost | le | 7.8.4 | |
| mattermost | ge | 7.1.0 | |
| mattermost | le | 7.1.9 | |
| mattermost | eq | 7.10.0 |
References
Related
osv
osv
CVE-2023-2786
2023-06-16 09:15:09
cve
cve
CVE-2023-2786
2023-06-16 09:15:09
nvd
nvd
CVE-2023-2786
2023-06-16 09:15:09
veracode
veracode
Missing Authentication
2023-06-28 06:12:53
cvelist
cvelist
CVE-2023-2786 Channel commands execution doesn't properly verify permissions
2023-06-16 08:43:49