CVE-2023-5159 — A User Manager role with user edit permissions could manage/update bots
Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots.
Published: 2023-09-29 · CVSS: 3.8 · CVSS 3.1
Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7