Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/13 12:31 p.m.12 views

Mattermost doesn't properly validate channel membership at the time of data retrieval

Mattermost versions 10.11.x = 10.11.9 fail to properly validate channel membership at the time of data retrieval which allows a deactivated user to learn team names they should not have access to via a race condition in the /commonteams API endpoint.. Mattermost Advisory ID: MMSA-2025-00549...

3.1CVSS5.5AI score0.00199EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder