Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2022-1003

Sysadmin can override existing configs & bypass restrictions like EnableUploads

Description

One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

  • unspecified to ≤ 6.3affected

References