CVE-2023-3613

—

CVSS 3.1

3.5 low

EPSS

<1%p22

Published

Jul 17, 2023 (Jul 17, 2023)

Modified

Jun 17, 2026

Description

Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

Vendors: mattermost
Products: mattermost server
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.