Unrated severityNVD Advisory· Published Jul 17, 2023· Updated Oct 21, 2024

Guest accounts invited and added to channels by Welcomebot plugin

CVE-2023-3613

Description

Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mattermost/WelcomeBotllm-create
osv-coords
pkg:bitnami/mattermost
Range: < 7.8.6
Mattermost/Mattermost Plugin APIcpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

mattermost.com/security-updatesmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000