CVE-2023-3586

Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible.

Score

CVSS 3.1 5.4 Medium

Status

Modified - responsibledisclosure@mattermost.com

Published

2023-07-17

Last modified

2024-10-22

Weaknesses

CWE-863

Affected products

• Mattermost (Mattermost)
• Mattermost Server (Mattermost)

References

• https://mattermost.com/security-updates