Mattermost App Framework vulnerabilities

2 vulnerabilities

Known vulnerabilities in Mattermost App Framework, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2023-2784mattermostmattermost+1
EPSS score
0.32%
Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps.4.3CVE-2023-2783github.com/mattermost/mattermost-serverv6+2
EPSS score
0.44%
Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents of the post sent by the Apps.