Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled
References
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Mattermost

Published: 2023-11-27T09:05:19.917Z

Updated: 2024-08-02T21:16:43.979Z

Reserved: 2023-11-22T11:37:35.979Z

Link: CVE-2023-47865

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-11-27T09:15:32.587

Modified: 2024-11-21T08:30:56.033

Link: CVE-2023-47865

cve-icon Redhat

No data.