Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Invitation Email is resent as a Reminder after invalidating pending email invites
Vulnerability Description
Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from the system console, which allows accidentally invited users to join the workspace and access information from the public teams and channels.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
在生命周期中对资源的控制不恰当
Vulnerability Title
Mattermost 安全漏洞
Vulnerability Description
Mattermost是美国Mattermost公司的一个开源协作平台。 Mattermost 6.4.x 和更早版本存在安全漏洞，该漏洞源于当从系统控制台执行操作时无法正确地使待处理的电子邮件邀请无效，这允许意外邀请的用户加入工作区并访问来自公共团队和频道的信息。
CVSS Information
N/A
Vulnerability Type
N/A