admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-1332.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

771 B
Raw Blame History

CVE-2022-1332

Description

One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents.

POC

Reference

Github

No PoCs found on GitHub currently.