Skip to content
OpenAdvisories

Product · Mattermost

Mattermost App Framework

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2023-2784

    Apps Framework allows install requests from regular members via an internal path

    Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.

    Mattermost Mattermost App Framework
  • Medium 4.3
    CVE-2023-2783

    App Framework does not checks for the secret provided in the incoming webhook request

    Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps.

    Mattermost Mattermost App Framework github.com/mattermost/mattermost-server/v6 Go