CVE-2023-4107 (published 2023-08-11T06:12:21.977Z)
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.8.8, 7.9.6, 7.10.4