CVE-2016-11062: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Mattermost Server before 3.5.1. E-mail address verification can be bypassed...