CVE-2020-14460

An issue was discovered in Mattermost Server before 5.19.0, 5.18.1, 5.17.3, 5.16.5, and 5.9.8. Creation of a trusted OAuth application does not always require admin privileges, aka MMSA-2020-0001...

CVE-2020-14460

Mattermost Server vulnerability CVE-2020-14460 affects versions prior to 5.19.0, including 5.18.1, 5.17.3, 5.16.5 and 5.9.8, where creating a trusted OAuth application may bypass admin privileges. Root cause details are not explicitly stated in the provided documents, but remediation is to upgrad...