Vulnerabilities > CVE-2023-5331 - Missing Authorization vulnerability in Mattermost Server

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mattermost
CWE-862
NVD
Published: 2023-10-09
Updated: 2023-10-12

Summary

Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file information.

Vulnerable Configurations

Part Description Count
Application
Mattermost
665

Common Weakness Enumeration (CWE)

References