CVE-2023-50333: Improper Access Control

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to update permissions for the current session for a user who has just been downgraded to a guest, allowing the newly...

CVE-2023-3484: Incorrect Authorization

An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starting from 16.0 before 16.0.7, all versions starting from 16.1 before 16.1.2. An attacker could change the name or path of a public top-level group in certain situations...

The vulnerability of the fly-admin-samba component in the FLY operating system environment of Astra Linux allows a hacker to trigger a service failure.

The vulnerability of the fly-admin-samba component in the FLY operating environment of the Astra Linux system is related to an error that causes an emergency restart of the mnbd service when the name of the user group is changed. Exploiting this vulnerability allows a remote attacker to cause a...