CVE-2023-2791 (published 2023-06-16T08:59:16.854Z)
When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated attacker to edit an arbitrary channel post.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 0, 7.9.2, 7.8.3, 7.7.4, 7.10.1