VYPR
Unrated severityNVD Advisory· Published Jul 17, 2023· Updated Oct 21, 2024

Lack of channel membership check when linking a board to a channel

CVE-2023-3582

Description

Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to,

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.