VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 27, 2023· Updated Dec 6, 2024

IDOR: Updating a playbook via the Playbooks API

CVE-2023-27264

Description

A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.