CVE-2023-2791

Summary

CVE-2023-2791 is a vulnerability affecting Mattermost, an open-source team collaboration platform. An authenticated attacker can exploit this issue by creating a malicious playbook run via the /dialog API. The platform fails to validate all parameters in this API call, enabling the attacker to edit any channel post arbitrarily. This vulnerability poses a significant risk to data integrity and could be utilized to spread misinformation or disrupt workflows within an organization. It is recommended that users apply the available patch or update their Mattermost instances to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.