CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.3. See the original NVD description below for full technical details.
CVE
CVE-2022-1003
Severity
LOW
CVSS
3.3
EPSS
0.49%
Original NVD Description
One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads.
Related CVEs
Other vulnerabilities affecting the same vendor(s)