VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 27, 2023· Updated Dec 6, 2024

IDOR: Updating a playbook via the Playbooks API

CVE-2023-27264

Description

A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.