Lucene search
PRIOn knowledge basePRION:CVE-2024-23493HistoryFeb 29, 2024 - 8:15 a.m.
Code injection
2024-02-2908:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
ad/ldap groups
authorization failure
user access
Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of.
References
Related
osv
osv
Mattermost leaks details of AD/LDAP groups of a teams in github.com/mattermost/mattermost-server
2024-06-28 15:28:53
Mattermost leaks details of AD/LDAP groups of a teams
2024-02-29 09:30:34
CGA-gvhx-fgcw-f546
2024-06-24 14:34:06
cve
cve
CVE-2024-23493
2024-02-29 08:15:47
nvd
nvd
CVE-2024-23493
2024-02-29 08:15:47
cvelist
cvelist
veracode
veracode
Improper Access Control
2024-03-01 12:48:15
github
github
Mattermost leaks details of AD/LDAP groups of a teams
2024-02-29 09:30:34