CVE-2023-4106: Missing Authorization

August 11, 2023 (updated August 16, 2023)

Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks.

References

github.com/advisories/GHSA-p267-jjfq-pphf
mattermost.com/security-updates
nvd.nist.gov/vuln/detail/CVE-2023-4106

Code Behaviors & Features

Detect and mitigate CVE-2023-4106 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →