CVE-2023-27264

Publication date

2023-02-27 14:46:16

Family

Mattermost

State

PUBLISHED

Description

A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.