admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-2788.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

750 B
Raw Blame History

CVE-2023-2788

Description

Mattermost fails to check if an admin user account active after an oauth2 flow is started, allowing an attacker with admin privileges to retain persistent access to Mattermost by obtaining an oauth2 access token while the attacker's account is deactivated.

POC

Reference

Github

No PoCs found on GitHub currently.