CVE-2023-3587

published 2023-07-17

CVE-2023-3587: Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join…

low 2.7 CVSS 3.1

AV N AC L PR H UI N S U C N I L A N

Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join the board with editor access, without the UI showing the updated permissions.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
mattermost	mattermost	<= 7.8.6	—
mattermost	mattermost_server	>= 7.10.0 < 7.10.3	7.10.3
mattermost	mattermost_server	>= 7.8.0 < 7.8.7	7.8.7

CWE-862