CVE-2023-49607

HIGH7.5EPSS 0.11%
發布日:2024/3/6修改日:2025/4/3

描述

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.

受影響套件(1)

  • Bitnami/mattermostfrom 0, < 7.8.15, >= 8.0.0, < 8.1.6, >= 9.0.0, < 9.0.4, >= 9.1.0, < 9.1.3, >= 9.2.0, < 9.2.2

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

參考連結(2)