Lucene search
PRIOn knowledge basePRION:CVE-2023-46701HistoryDec 12, 2023 - 9:15 a.m.
Authorization
2023-12-1209:15:00
PRIOn knowledge base
www.prio-n.com
3
mattermost
playbooks plugin
authorization
vulnerability
endpoint
limited information
post id
nvd
Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin allowing an attacker to get limited information about a post if they know the post ID
References
Related
cve
cve
CVE-2023-46701
2023-12-12 09:15:08
osv
osv
BIT-mattermost-2023-46701
2024-03-06 10:58:47
CVE-2023-46701
2023-12-12 09:15:08
cvelist
cvelist
CVE-2023-46701 Inaccessible Post Information Leak via Run Timeline IDOR
2023-12-12 08:19:22
veracode
veracode
Authorization Bypass
2024-03-18 17:42:19
nvd
nvd
CVE-2023-46701
2023-12-12 09:15:08