CVE-2026-93847: Mattermost Server: hatalı yetkilendirme

Açıklama (NVD)

Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and publication paths which allows an authenticated channel member to publish messages rendering as trusted system events via the scheduled post endpoint.. Mattermost Advisory ID: MMSA-2026-00732

Özet bilgiler

Ürün

Mattermost Mattermost Server

CVSS v3.1

3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS

%0,17 (yüzdelik 7)

CWE

CWE-863

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• mattermost.com
• CWE-863