Lucene search
+L

2 matches found

osv_go
osv_go
•added 2026/08/25 7:43 p.m.•27 views

GO-2026-6283 Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation in github.com/mattermost/mattermost-server

Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation in github.com/mattermost/mattermost-server...

4.3CVSS5.7AI score0.00152EPSS
SaveExploits0References17
Github Security Blog
Github Security Blog
•added 2026/06/12 6:31 p.m.•23 views

Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation the check was only applied on update/patch, which allows an authenticated user holding...

4.3CVSS5.5AI score0.00152EPSS
SaveExploits0References17Affected Software2
Rows per page
Query Builder