← All credits
BhaRat (hackit_bharat)
14 vulnerability records and advisories credit this contributor.
CVE-2024-31859
Member promoted to channel admin via playbooks run linking to channel
CVE-2024-23488
Files of archived channels accessible with the “Allow users to view archived channels” option disabled
CVE-2024-5272
Run Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"
CVE-2024-4195
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.