CVE-2023-4478

Mattermost is affected by CVE-2023-4478 due to improper handling of signup request parameters, allowing an attacker to register users as inactive and thereby block future access unless an admin activates the accounts. The issue stems from the system’s failure to restrict which request parameters ...