VULNERABILITY INTELLIGENCE

CVE-2023-3613

CVSS score3.5 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2023-07-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-863
  • nvd@nist.gov: CWE-863

Primary references