Total vulnerabilities in the database
Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of.
Software | From | Fixed in |
---|---|---|
![]() |
9.4.0 | 9.4.2 |
![]() |
9.3.0 | 9.3.1 |
![]() |
9.2.0 | 9.2.5 |
![]() |
- | 8.1.9 |
mattermost / mattermost_server | 9.4.0 | 9.4.2 |
mattermost / mattermost_server | 9.3.0 | 9.3.0.x |
mattermost / mattermost_server | - | 8.1.9 |
mattermost / mattermost_server | 9.3.0-rc1 | 9.3.0-rc1.x |
mattermost / mattermost_server | 9.3.0-rc2 | 9.3.0-rc2.x |
mattermost / mattermost_server | 9.0.0 | 9.2.5 |