CVE-2023-2784 (published 2023-06-16T08:41:59.270Z)
Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user send install requests to the Apps. 
Affected products: Vendor: Mattermost
Product: Mattermost App Framework
Versions: 0, 0, 7.10.0, v7.8.5, v7.9.4, v7.10.1