tocsin

CVE-2023-1774

3 advisories.

Go/github.com/mattermost/mattermost-server CVE-2023-1774: medium 5.4

Mattermost fails to properly authentication inviter's permissions to private channel

Action: Upgrade github.com/mattermost/mattermost-server to 7.1.6 or later.

go get github.com/mattermost/mattermost-server@v7.1.6
go get github.com/mattermost/mattermost-server@v7.7.2

Affected

introducedfixedlast affected
3.3.07.1.6-
7.7.07.7.2-
7.1.07.1.6-

Fixed versions

7.1.67.7.2

Sources

CVE-2023-1774 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2023-1774: medium 5.4

Mattermost fails to properly authentication inviter's permissions to private channel

Action: Upgrade github.com/mattermost/mattermost-server/v5 to 7.1.6 or later.

go get github.com/mattermost/mattermost-server/v5@v7.1.6

Affected

introducedfixedlast affected
5.0.07.1.6-

Fixed versions

7.1.6

Sources

CVE-2023-1774 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2023-1774: medium 5.4

Mattermost fails to properly authentication inviter's permissions to private channel

Action: Upgrade github.com/mattermost/mattermost-server/v6 to 7.1.6 or later.

go get github.com/mattermost/mattermost-server/v6@v7.1.6

Affected

introducedfixedlast affected
6.0.07.1.6-

Fixed versions

7.1.6

Sources

CVE-2023-1774 · published · modified · JSON