CVE-2023-5194 — A system/user manager can demote / deactivate another manager
Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager
Published: 2023-09-29 · CVSS: 2.7 · CVSS 3.1
Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7