CVE-2023-2515
published 2023-05-12CVE-2023-2515: Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin
high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | mattermost_mattermost-server_v6 | >= 0 < 7.1.8 | 7.1.8 |
| github.com | mattermost_mattermost-server_v6 | >= 7.2.0 < 7.7.4 | 7.7.4 |
| github.com | mattermost_mattermost-server_v6 | >= 7.8.0 < 7.8.3 | 7.8.3 |
| github.com | mattermost_mattermost-server_v6 | >= 7.9.0 < 7.9.2 | 7.9.2 |
| mattermost | mattermost | <= 7.1.7 | — |
| mattermost | mattermost_server | < 7.1.8 | 7.1.8 |
| mattermost | mattermost_server | >= 7.2.0 < 7.7.4 | 7.7.4 |
| mattermost | mattermost_server | >= 7.8.0 < 7.8.3 | 7.8.3 |
| mattermost | mattermost_server | >= 7.9.0 < 7.9.2 | 7.9.2 |