Lucene search
+L

2 matches found

OSV
OSV
•added 2026/08/25 7:43 p.m.•13 views

GO-2026-6283 Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation in github.com/mattermost/mattermost-server

Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation in github.com/mattermost/mattermost-server...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References17
Github Security Blog
Github Security Blog
•added 2026/06/12 6:31 p.m.•15 views

Mattermost doesn't enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Fail to enforce PermissionInviteUser when setting AllowOpenInvite or AllowedDomains during team creation the check was only applied on update/patch, which allows an authenticated user holding...

4.3CVSS5.8AI score0.00254EPSS
SaveExploits0References17Affected Software2
Rows per page
Query Builder