An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use the invite_people slash command to invite a non-permitted user.
CPE | Name | Operator | Version |
---|---|---|---|
mattermost-server | eq | 5.0.0 | |
mattermost-server | eq | 5.0.1 | |
mattermost-server | eq | 5.0.1-rc1 | |
mattermost-server | eq | 5.0.0-rc6 | |
mattermost-server | eq | 5.0.0-rc7 |