Incorrect Authorization

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Incorrect Authorization due to insufficient validation of permission requirements in the team member roles API endpoint. An attacker can gain...

EUVD-2024-1107

Malicious code in bioql PyPI...

CVE-2024-4198

Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests...

CVE-2024-4198

Mattermost server vulnerability CVE-2024-4198: Versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes. This allows an attacker authenticated as a team admin to demote users to guest via crafted HTTP requests. Root cause is incomplete validation of role cha...