Security Advisory
CVE-2023-2791
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel post.