VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Aug 25, 2023· Updated Jun 17, 2026

CVE-2023-4478

CVE-2023-4478

Description

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mattermost/Mattermost4 versions
    cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: <7.8.9
    • cpe:2.3:a:mattermost:mattermost_server:8.0.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 0
  • osv-coords
    pkg:bitnami/mattermost
    Range: < 7.8.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.