CVE-2022-1548

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.

Score

CVSS 3.1 8.8 High

Status

Modified - responsibledisclosure@mattermost.com

Published

2022-05-03

Last modified

2024-12-06

Weaknesses

CWE-264

Affected products

• Mattermost Playbooks (Mattermost)
• Playbooks (Mattermost)

References

• https://mattermost.com/security-updates/