CVE-2023-6727

Katalog CVE

CVSS 4.3 · Medium EPSS 0,41%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada mattermost server. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Mattermost fails to perform correct authorization checks when creating a playbook action, allowing users without access to the playbook to create playbook actions. If the playbook action created is to post a message in a channel based on specific keywords in a post, some playbook information, like the name, can be leaked. 

Rincian

Terbit di NVD

12 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mattermost.com/security-updates issue tracking · advisory vendor