CVE Catalog
CVE-2023-3582
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.30%
21th percentile - higher than 21% of all known CVEs
Summary
Mattermost fails to verify channel membership when linking a board to a channel, allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to.
Risk Assessment
The risk is that low-privileged users may gain access to private information in channels they should not have access to.
Recommendation
It is recommended to update Mattermost to the latest version to ensure proper verification of channel membership.
Original NVD description (English source)
Mattermost fails to verify channel membership when linking a board to a channel allowing a low-privileged authenticated user to link a Board to a private channel they don't have access to,