Описание
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import which allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. Mattermost Advisory ID: MMSA-2026-00672
EPSS
Процентиль: 7%
0.0017
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 5.4
debian
6 дней назад
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prev ...
CVSS3: 5.4
github
6 дней назад
Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import which allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. Mattermost Advisory ID: MMSA-2026-00672
EPSS
Процентиль: 7%
0.0017
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-863