Описание
Mattermost fails to check the "invite_guest" permission when inviting guests of other teams to a team, allowing a member with permissions to add other members but not to add guests to add a guest to a team as long as the guest was already a guest in another team of the server
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mattermost-server | itp | package |
EPSS
Процентиль: 30%
0.00109
Низкий
Связанные уязвимости
CVSS3: 4.3
nvd
почти 2 года назад
Mattermost fails to check the "invite_guest" permission when inviting guests of other teams to a team, allowing a member with permissions to add other members but not to add guests to add a guest to a team as long as the guest was already a guest in another team of the server
CVSS3: 4.3
github
почти 2 года назад
Mattermost fails to check the "invite_guest" permission
EPSS
Процентиль: 30%
0.00109
Низкий