CVE-2023-47865
27.11.2023, 09:15
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabledEnginsight
Vendor | Product | Version |
---|---|---|
mattermost | mattermost | 𝑥 ≤ 7.8.12 |
mattermost | mattermost | 8.0.0 ≤ 𝑥 ≤ 8.1.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration