2 matches found
Mattermost doesn't check if {{team_id}} was being changed when updating playbooks
Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to check if teamid was being changed when updating playbooks, allowing users with only Manage Playbook Configurations permission to change a playbook's team, bypassing manage members restriction via PUT api. Mattermost Advisory ID:...
4.3CVSS5.8AI score0.00143EPSS
SaveExploits0References4Affected Software2
EUVD-2026-30750
Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to check if teamid was being changed when updating playbooks, allowing users with only Manage Playbook Configurations permission to change a playbook's team, bypassing manage members restriction via PUT api. Mattermost Advisory ID:...
4.3CVSS5.8AI score0.00143EPSS
SaveExploits0References1
20