CGA-ww64-95f3-2pxc

Published

Last updated

https://images.chainguard.dev/security/CGA-ww64-95f3-2pxc

Package

mattermost-9.11

Latest Update

Not affected

Aliases

CVE-2023-50333
GHSA-9w97-9rqx-8v4j

Severity

3.7

Low

CVSS V3

Summary

Mattermost allows demoted guests to change group names

Description

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-50333
https://github.com/advisories/GHSA-9w97-9rqx-8v4j
https://github.com/mattermost/mattermost/commit/61dd452fb2fcd3ac6f7b2e050f7f0a93a92d95fc
https://github.com/mattermost/mattermost
https://mattermost.com/security-updates

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-ww64-95f3-2pxc

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources