CVE-2023-47865 (published 2023-11-27T09:05:19.917Z)
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 7.8.13, 8.1.4