Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-47865

Username and Icon override can be used by members when Hardened Mode is enabled

Description

Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ 8.1.3affected
  • 0 to ≤ 7.8.12affected
  • 7.8.13unaffected
  • 8.1.4unaffected

References