CVE-2023-49874
IDOR when updating the tasks of a private playbook run
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
IDOR when updating the tasks of a private playbook run
| Assigner | Mattermost |
| Reserved | 2023-12-05 |
| Published | 2023-12-12 |
| Updated | 2024-08-02 |
Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest to update the tasks of a private playbook run if they know the run ID.
DoyenSec
https://mattermost.com/security-updates
Support options
