CVE-2023-4478

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts.
CVSS

No CVSS.

References
Configurations

No configuration.

Information

Published : 2023-08-25 10:15

Updated : 2023-08-25 12:47


NVD link : CVE-2023-4478

Mitre link : CVE-2023-4478


JSON object : View

Products Affected

No product.

CWE

No CWE.