CVE-2022-1548 Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.

Low 3.7 Published 3 May 2022 Updated 6 Dec 2024

Attackers can escalate privileges to perform admin-only actions in Mattermost Playbooks due to missing permission checks.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2022-1548?

CVE-2022-1548 is a low-severity vulnerability in Mattermost Playbooks, published on 3 May 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.

Weakness: CWE-264

Which versions are affected by CVE-2022-1548?

It affects 1 product.

Products include Mattermost Playbooks.

How do I fix CVE-2022-1548?

No fix has been published for CVE-2022-1548 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-1548 being exploited?

There is no known exploitation of CVE-2022-1548 in the wild and no public exploit code.

CVE-2022-1333 A specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service Low 3.5

Sources

Also known as GHSA-7mg2-6r67-v772.