CGA-6v9p-2h3w-4g4m

Published

Last updated

https://images.chainguard.dev/security/CGA-6v9p-2h3w-4g4m

Package

mattermost-fips-10.7

Repository

Chainguard

Latest Update

Fixed

Fixed Version

10.7.1-r1

Aliases

CVE-2023-50333
GHSA-9w97-9rqx-8v4j

Severity

Unknown

Summary

Mattermost allows demoted guests to change group names

Description

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-50333
https://github.com/advisories/GHSA-9w97-9rqx-8v4j
https://github.com/mattermost/mattermost/commit/61dd452fb2fcd3ac6f7b2e050f7f0a93a92d95fc
https://github.com/mattermost/mattermost
https://mattermost.com/security-updates

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-6v9p-2h3w-4g4m

Severity

Summary

Description

References

Updates

Products

Why Chainguard

Customers

Company

Resources