Approved changes feed: RSS · Atom

cpe:2.3:a:mattermost:mattermost:7.5.0:*:*:*:*:*:*:*

part: a version: 7.5.0 update: *

VendorMattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc)
ProductMattermost (fd9a4a2e-f26d-5cef-a4c3-f85b0b13d8ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mattermost/mattermost-server purl2cpe 2026-06-01 10:18:19.703976

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-27264 vulnerable 2026-06-03 14:51:00.798495 IDOR: Updating a playbook via the Playbooks API
HIGH (7.1)
A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.
Published: 2023-02-27T14:46:16.310Z
Updated: 2024-12-06T23:06:49.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27263 vulnerable 2026-06-03 14:51:00.797165 IDOR: Accessing playbook runs via the Playbooks Runs API
MEDIUM (4.3)
A missing permissions check in the /plugins/playbooks/api/v0/runs API in Mattermost allows an attacker to list and view playbooks belonging to a team they are not a member of.
Published: 2023-02-27T14:44:52.790Z
Updated: 2024-12-06T23:07:00.432Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.