Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2023-3587

Inconsistent state in UI after boards permission change by system admin

Description

Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ 7.8.6affected
  • 0 to ≤ 7.9.4affected
  • 0 to ≤ 7.10.2affected
  • 7.8.7unaffected
  • 7.9.5unaffected
  • 7.10.3 unaffected

References