Mattermost: >> Mattermost >> 7.8.6 Security Vulnerabilities
Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks.
CVSS Score
6.3
EPSS Score
0.001
Published
2023-08-11
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.
CVSS Score
6.7
EPSS Score
0.0
Published
2023-08-11
Page 3