Description
An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding whether a user can receive intra-team posts.
Unscored
CVE-2019-20887
EUVD-2019-11424GHSA-24mg-7j8x-g2w5
An issue was discovered in Mattermost Server before 5.7.1, 5.6.4, 5.5.3, and 4.10.6. It does not honor flags API permissions when deciding …
Published Jun 19, 2020 · Updated Aug 5, 2024 · Assigned by mitre