CVE-2023-46701

Summary

CVE-2023-46701: Mattermost's Playbooks plugin is vulnerable to information disclosure through the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint. Authorization checks are bypassed, enabling attackers to access limited details of a post if they possess the post ID. This issue may lead to potential information leakage within the affected Mattermost environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.