CVE-2023-50333

creationtimestamp| type| source ---|---|--- 2024-01-02 11:26:28+00:00| seen| https://t.me/ctinow/161684 2024-01-03 01:35:24+00:00| seen| https://t.me/cibsecurity/74178 2024-01-22 18:41:25+00:00| seen| https://t.me/ctinow/171352...

CVE-2023-50333 Lack of restriction to manage group names for freshly demoted guests

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...

CVE-2023-50333 Lack of restriction to manage group names for freshly demoted guests

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...

CVE-2023-50333

CVE-2023-50333 affects Mattermost Server. Affected component: mattermost/server/v8 (Go module). Root cause: after a user is demoted to guest, the system fails to update the permissions of the current session, allowing freshly demoted guests to change group names. Exposed impact: privilege misalig...