Lucene search
+L

27 matches found

osv_ghsa
osv_ghsa
•added 2026/03/16 3:30 p.m.•23 views

GHSA-FX49-M253-27JJ Mattermost fails to filter invite IDs based on user permissions

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation. Mattermost Advisory ID:...

4.3CVSS6.4AI score0.00173EPSS
SaveExploits0References4
Rows per page
Query Builder