cve.bz

CVE-2023-2515

8.8 highEPSS 0.5%

High (8.8) in mattermost mattermost server. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in github.com/mattermost/mattermost-server/v6 7.1.8, 7.7.4, 7.8.3.

Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privileges to system admin

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE
CWE-863
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-7g2v-2frm-rg94Gogithub.com/mattermost/mattermost-server/v6<7.1.87.1.8
GHSA-7g2v-2frm-rg94Gogithub.com/mattermost/mattermost-server/v6>=7.2.0 <7.7.47.7.4
GHSA-7g2v-2frm-rg94Gogithub.com/mattermost/mattermost-server/v6>=7.8.0 <7.8.37.8.3
GHSA-7g2v-2frm-rg94Gogithub.com/mattermost/mattermost-server/v6>=7.9.0 <7.9.27.9.2

References

Check your stackJSON