CVE-2023-46701

Publication date

2023-12-12 08:19:22

Family

Mattermost

State

PUBLISHED

Description

Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint of the Playbooks plugin allowing an attacker to get limited information about a post if they know the post ID