CVE-2023-49607CWE-754

Playbook plugin crash via missing interface type assertion

Medium · published December 12, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playbook Plugin when updating the status dialog.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.4th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2023-12-12T08:21Z
EPSS history
Timeline
  • 12 DEC 08:21Z
    Playbook plugin crash via missing interface type assertion
    cvelistv5