CVE-2023-4107

MediumCVSS 6.7

Published: 11/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.

Risk Assessment

Improper permission validation may lead to unauthorized changes to admin data, jeopardizing system security and data integrity.

Recommendation

It is recommended to update Mattermost to the latest version that fixes the user permission validation when updating admin details.

Original NVD description (English source)

Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.