PT-2023-29295 · Unknown · Mattermost

0Aqd · Publicado 2023-08-25 · Atualizado 2024-03-06 · CVE-2023-4478

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Mattermost (affected versions not specified)

Description The issue allows an attacker to register users as inactive during signup by manipulating parameters, thus blocking them from later accessing the system without the system admin activating their accounts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

BIT-MATTERMOST-2023-4478

CVE-2023-4478

Produtos afetados

Mattermost

Referências · 7

• https://t.me/cibsecurity/69186 · Publicação no Telegram
• https://mattermost.com/security-updates · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-4478 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4478 · Nota
• https://osv.dev/vulnerability/CVE-2023-4478 · Aviso do Fabricante
• https://t.me/cvenotify/57279 · Publicação no Telegram
• https://osv.dev/vulnerability/BIT-mattermost-2023-4478 · Aviso do Fabricante