Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6ph-8227-6m8x

Опубликовано: 16 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.8

Описание

Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mattermost Advisory ID: MMSA-2025-00531

Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mattermost Advisory ID: MMSA-2025-00531

EPSS

Процентиль: 9%
0.00032
Низкий

3.8 Low

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 3.8
nvd
14 дней назад

Mattermost versions 10.11.x <= 10.11.10 fail to properly validate permission requirements in the team member roles API endpoint which allows team administrators to demote members to guest role. Mattermost Advisory ID: MMSA-2025-00531

CVSS3: 3.8
debian
14 дней назад

Mattermost versions 10.11.x <= 10.11.10 fail to properly validate perm ...

EPSS

Процентиль: 9%
0.00032
Низкий

3.8 Low

CVSS3

Дефекты

CWE-863