Description
Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost
Default version status: unaffected
9.9.0 to ≤ 9.9.1affected9.5.0 to ≤ 9.5.7affected9.10.0affected9.8.0 to ≤ 9.8.2affected9.11.0unaffected9.9.2unaffected9.5.8unaffected9.10.1unaffected9.8.3unaffected