CVE-2019-20879

An issue was discovered in Mattermost Server before 5.8.0, 5.7.2, 5.6.5, and 4.10.7. Changes to e-mail addresses do not require credential re-entry...

CVE-2019-20879

CVE-2019-20879 affects Mattermost Server prior to 5.8.0, 5.7.2, 5.6.5, and 4.10.7. The issue allows changing a user’s email address without credential re-entry, indicating an authentication/authorization control flaw. Root cause details are not provided in the connected documents. No explicit exp...