CVE-2023-2515 — Privilege escalation to system admin via personal access tokens
Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin
Published: 2023-05-12 · CVSS: 4.7 · CVSS 3.1
Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7