Mattermost: >> Mattermost Server >> 7.9.5 Security Vulnerabilities
Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts.
CVSS Score
4.3
EPSS Score
0.003
Published
2023-08-25
Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invited to channels by default.
CVSS Score
3.5
EPSS Score
0.001
Published
2023-07-17
Page 3