CVE-2023-2787

—

CVSS 3.1

6.5 medium

EPSS

<1%p44

Published

Jun 16, 2023 (Jun 16, 2023)

Modified

Jun 17, 2026

Description

Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.

Vendors: mattermost
Products: mattermost
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.