Mattermost versions 9.6.0, 9.5.x... CVE-2024-4195
-
AV
AC
AU
C
I
A
发布：
2024-04-26
修订：
2024-04-26
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有0条受影响产品信息
