Lucene search
+L

6 matches found

OSV
OSV
added 2026/06/12 6:31 p.m.8 views

GHSA-M2W9-H2MM-79QR Mattermost doesn't require system-level permission when patching protected default system roles

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 fail to require system-level permission when patching protected default system roles, which allows authenticated users with delegated user-management permissions to escalate privileges by altering built-i...

6.7CVSS5.3AI score0.00257EPSS
SaveExploits0References16
Rows per page
Query Builder