Mattermost Legal Hold Plugin Authorization Bypass Vulnerability Allowing Unauthorized Access to Legal Hold Data

A vulnerability exists in the Mattermost Plugin Legal Hold, specifically in versions through 1.1.4. The issue arises because the plugin fails to properly stop request processing after an authorization check fails. This flaw enables an authenticated attacker to manipulate API requests to the plugin's endpoints, gaining unauthorized access to legal hold data. The attacker can also create, download, and delete legal hold information.

Impact

Exploitation of this vulnerability allows for unauthorized access to, creation, download, and deletion of legal hold data within the Mattermost environment.

Remediation

Users can upgrade to Mattermost Plugin Legal Hold version 1.1.5 or later to address this vulnerability.