CVE-2023-4107 — Incorrect authorization allows a user manager to update a system admin
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, fir…
Published: 2023-08-11 · CVSS: 6.7 · CVSS 3.1
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7