CVE-2023-1774 — Unauthorized email invite to a private channel
When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to that channel, allowing an attacker to invite themselves …
Published: 2023-03-31 · CVSS: 4.2 · CVSS 3.1
When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to that channel, allowing an attacker to invite themselves to a private channel.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7