medium4.3
CVE-2023-2791
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel …
Impact
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel post.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost | from 7.7.0 through 7.7.3 from 7.8.0 through 7.8.2 from 7.9.0 through 7.9.1 Version 7.10.0 |