CVE-2023-5159 (published 2023-09-29T09:21:37.828Z)
Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 7.8.10, 8.1.1