Total vulnerabilities in the database
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintended excessive invitation privileges.
| Software | From | Fixed in |
|---|---|---|
| mattermost / mattermost_server | 4.6.0 | 4.6.3 |
| mattermost / mattermost_server | 4.7.0 | 4.7.4 |
| mattermost / mattermost_server | 4.8.0 | 4.8.1 |