Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2023-50333

Lack of restriction to manage group names for freshly demoted guests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mattermost

Description

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ 9.2.2affected
  • 0 to ≤ 8.1.6affected
  • 8.1.7unaffected

References