Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Auto-Enrollment of Team Admins into Private Channels without explicit consent
Vulnerability Description
Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
授权机制不正确
Vulnerability Title
Mattermost 安全漏洞
Vulnerability Description
Mattermost是美国Mattermost公司的一个开源协作平台。 Mattermost 9.11.8及之前版本存在安全漏洞，该漏洞源于未在将团队管理员添加到私有频道之前提示明确批准，允许团队管理员通过特制的永久链接加入私有频道。
CVSS Information
N/A
Vulnerability Type
N/A