A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugins/playbooks/api/v0/playbooks/[playbookID] API.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-27264.json"