2 lines
3.5 KiB
JSON
2 lines
3.5 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mattermost","vendor":"Mattermost","versions":[{"lessThanOrEqual":"7.8.7","status":"affected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.9.5","status":"affected","version":"0","versionType":"semver"},{"lessThanOrEqual":"7.10.3","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"7.8.8"},{"status":"unaffected","version":"7.9.6"},{"status":"unaffected","version":"7.10.4"}]}],"source":"responsibledisclosure@mattermost.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*","matchCriteriaId":"DD009FA6-13F6-4278-BFD6-FEF7EB0CBE76","versionEndExcluding":"7.8.8","versionStartIncluding":"7.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*","matchCriteriaId":"48DD3C64-F6CE-486D-8AAF-DFB842C458A6","versionEndExcluding":"7.9.6","versionStartIncluding":"7.9.0","vulnerable":true},{"criteria":"cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*","matchCriteriaId":"2033E504-EE27-49CC-8E76-5776450E1CD6","versionEndExcluding":"7.10.4","versionStartIncluding":"7.10.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks.\n\n"},{"lang":"es","value":"Mattermost no comprueba si el usuario solicitante es un invitado antes de realizar diferentes acciones en los libros de reproducción públicos, por lo que un invitado puede ver, unirse, editar, exportar y archivar libros de reproducción públicos."}],"id":"CVE-2023-4106","lastModified":"2026-06-17T06:37:05.670","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.4,"source":"responsibledisclosure@mattermost.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4106","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-01T20:20:46.702396Z","version":"2.0.3"}}]},"published":"2023-08-11T07:15:09.853","references":[{"source":"responsibledisclosure@mattermost.com","tags":["Vendor Advisory"],"url":"https://mattermost.com/security-updates"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://mattermost.com/security-updates"}],"sourceIdentifier":"responsibledisclosure@mattermost.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"responsibledisclosure@mattermost.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-862"}],"source":"nvd@nist.gov","type":"Primary"}]}
|