CVE-2022-1003

One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads.

Score
CVSS 3.1 4.9 Medium
Status
Modified - responsibledisclosure@mattermost.com
Published
2022-03-18
Last modified
2024-12-06
Weaknesses
CWE-268, CWE-269

Affected products

References

 
 
© AVABIS GmbH privacypolicy about