Skip to content
OpenAdvisories
Low · 3.7 CVE-2022-1548 EUVD-2022-24843GHSA-7mg2-6r67-v772

Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.

Published May 3, 2022 · Updated Dec 6, 2024 · Assigned by Mattermost

Description

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost Playbooks Playbooks – ≤ 1.25 —

References