Default credentials

2023-07-1716:15:00

PRIOn knowledge base

www.prio-n.com

mattermost

welcomebot plugin

validate membership

guest accounts

channels

default credentials

4.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.

CPENameOperatorVersion
mattermost_serverlt7.8.6
mattermost_serverge7.9.0
mattermost_serverlt7.10.3

Name	Operator	Version
mattermost_server	lt	7.8.6
mattermost_server	ge	7.9.0
mattermost_server	lt	7.10.3

References

mattermost.com/security-updates