NetSight
medium4.3

CVE-2023-3582

Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private chann…

Impact

Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to, 

Affected products

VendorProductAffected versions
MattermostMattermost Server
from 7.8.0 before 7.8.7
from 7.9.0 before 7.9.5
from 7.10.0 before 7.10.3

Weakness classification

References