← Database

CVE-2023-2515

MEDIUM CVSS: 4.7 Published: 2023-05-12 Modified: 2026-06-17

Description

Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-863, CWE-863

References