Описание
Mattermost fails to enforce invite permissions when updating team settings
Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561
Пакеты
github.com/mattermost/mattermost/server/v8
< 8.0.0-20251215190648-6404ab29acc0
8.0.0-20251215190648-6404ab29acc0
github.com/mattermost/mattermost-server
>= 11.1.0
Отсутствует
github.com/mattermost/mattermost-server
>= 10.11.0
Отсутствует
github.com/mattermost/mattermost-server
>= 11.2.0
Отсутствует
github.com/mattermost/mattermost-server
< 5.3.2-0.20251215190648-6404ab29acc0
5.3.2-0.20251215190648-6404ab29acc0
Связанные уязвимости
Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissions when updating team settings, which allows team administrators without proper permissions to bypass restrictions and add users to their team via API requests. Mattermost Advisory ID: MMSA-2025-00561
Mattermost versions 10.11.x <= 10.11.9 fail to enforce invite permissi ...