CVE-2023-4107

Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name...

CVE-2023-4107

creationtimestamp| type| source ---|---|--- 2023-08-11 12:27:16+00:00| seen| https://t.me/cibsecurity/68321...

CVE-2023-4107 Incorrect authorization allows a user manager to update a system admin

Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name...

CVE-2023-4107

Mattermost: Incorrect authorization allows a user manager to update a system admin’s details (email, first name, last name) due to inadequate permission checks. Affects Mattermost server implementations documented across Red Hat, EUVD/ENISA, VERACODE, OSV, GHSA and NVD entries. The issue is descr...