Description
Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost | 10.0.0 – ≤ 10.0.1, 10.1.0 – ≤ 10.1.1, 9.11.0 – ≤ 9.11.3, 9.5.0 – ≤ 9.5.11 | 10.2.0 |
Advisories 1
- WID-SEC-2024-3329 Mattermost: Schwachstelle ermöglicht nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jan 9, 2025