Known vulnerabilities in Mattermost App Framework
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-2784 | Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps… | 4.2 Medium | Jun 16, 2023 |
| CVE-2023-2783 | Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker… | 4.3 Medium | Jun 16, 2023 |