CVE-2023-3587

Summary

CVE-2023-3587 is a vulnerability affecting Mattermost, an open-source collaborative messaging platform. The issue arises due to a failure in the UI to accurately reflect changes in board permissions. Consequently, a system admin can modify board state settings, granting editor access to any user with a valid sharing link, without the updated permissions being visible in the UI. This vulnerability poses a risk to the security and integrity of Mattermost boards.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.