CVE-2023-3582
Lack of channel membership check when linking a board to a channel
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Lack of channel membership check when linking a board to a channel
Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to,
Reserved 2023-07-10 | Published 2023-07-17 | Updated 2024-10-21 | Assigner MattermostCWE-863 Incorrect Authorization
Ossi Väänänen
mattermost.com/security-updates
Support options
