CVE-2023-47865 — Username and Icon override can be used by members when Hardened Mode is enabled
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username…
Published: 2023-11-27 · CVSS: 4.3 · CVSS 3.1
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7