CVE-2019-20887

An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts...

CVE-2019-20887: Missing Authorization

An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts...

PT-2020-10851

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.7.1 Mattermost Server versions prior to 5.6.4 Mattermost Server versions prior to 5.5.3 Mattermost Server versions prior to 4.10.6 Description The issue concerns the Mattermost Server not honoring flags AP...