CVE-2023-3613

EPSS 0.29%
Veröffentlicht 17.07.2023 16:15:11
Zuletzt bearbeitet 21.11.2024 08:17:40
Erkennungen
Login

Guest accounts invited and added to channels by Welcomebot plugin

Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mattermost ≫ Mattermost Server Version < 7.8.6

Mattermost ≫ Mattermost Server Version >= 7.9.0 < 7.10.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.29%	0.213

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.5	2.1	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
responsibledisclosure@mattermost.com	3.5	2.1	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://mattermost.com/security-updates

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-3613

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-3613

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-3613

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-3613