Total vulnerabilities in the database
Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to properly enforce permissions which allows a team admin user without "Add Team Members" permission to disable the invite URL.
Software | From | Fixed in |
---|---|---|
![]() |
9.5.0 | 9.5.8 |
![]() |
9.10.0 | 9.10.1 |
mattermost / mattermost_server | 9.5.0 | 9.5.8 |
mattermost / mattermost_server | 9.10.0 | 9.10.0.x |