Lucene search
+L

26 matches found

OSV
OSV
added 2026/03/16 3:30 p.m.12 views

GHSA-FX49-M253-27JJ Mattermost fails to filter invite IDs based on user permissions

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID:...

4.3CVSS5.8AI score0.0017EPSS
SaveExploits0References4
Rows per page
Query Builder