MEDIUM 4.3 Go
Mattermost Improper Access Control vulnerability
GHSA-jj46-9cgh-qmfx · CVE-2023-47865
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes