CVE-2019-20883

Mattermost Server vulnerable prior to version 5.8.0 when Town Square is set to Read-Only. An attacker could pin or unpin a post, as described in CVE-2019-20883. The issue affects Mattermost Server