Lucene search
PRIOn knowledge basePRION:CVE-2023-5193HistorySep 29, 2023 - 10:15 a.m.
Design/Logic Flaw
2023-09-2910:15:00
PRIOn knowledge base
www.prio-n.com
7
mattermost
logic flaw
system role
dm conversation
permissions
Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a DM conversation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mattermost | ge | 7.0.0 | |
| mattermost | lt | 7.8.10 | |
| mattermost | ge | 8.1.0 | |
| mattermost | lt | 8.1.1 | |
| mattermost | ge | 8.0.0 | |
| mattermost | lt | 8.0.2 |
References
Related
cve
cve
CVE-2023-5193
2023-09-29 10:15:10
osv
osv
Mattermost Incorrect Authorization vulnerability
2023-09-29 12:30:16
CVE-2023-5193
2023-09-29 10:15:10
veracode
veracode
Privilege Escalation
2023-10-11 15:03:46
nvd
nvd
CVE-2023-5193
2023-09-29 10:15:10
github
github
Mattermost Incorrect Authorization vulnerability
2023-09-29 12:30:16
cvelist
cvelist
