CVE-2023-50333

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-50333

Severity

4.3

Medium

CVSS CVSS_V3

Description

Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names.

References

https://images.chainguard.dev/security/CGA-7q4c-cqwg-26gh
https://github.com/advisories/GHSA-9w97-9rqx-8v4j
https://images.chainguard.dev/security/CGA-rw2j-f6pp-j26m
https://images.chainguard.dev/security/CGA-35gg-vmwh-w2gj
https://images.chainguard.dev/security/CGA-h3gv-77hp-46qv
https://images.chainguard.dev/security/CGA-p8jj-4j4w-h4j2
https://images.chainguard.dev/security/CGA-8rp5-8mcg-m96h
https://images.chainguard.dev/security/CGA-28fj-7rmv-xw55
https://images.chainguard.dev/security/CGA-ww64-95f3-2pxc
https://images.chainguard.dev/security/CGA-36pv-hj3p-75gp
https://images.chainguard.dev/security/CGA-qfrr-cfqv-wx3p
https://images.chainguard.dev/security/CGA-6v9p-2h3w-4g4m
https://images.chainguard.dev/security/CGA-c9rj-6j49-mf4v
https://mattermost.com/security-updates

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal