CVE-2023-2786

Publication date

2023-06-16 08:43:49

Family

Mattermost

State

PUBLISHED

Description

Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.