CVE-2024-23493 — Team associated AD/LDAP Groups Leaked due to missing authorization
Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a mem…
Published: 2024-02-29 · CVSS: 4.3 · CVSS 3.1
Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7