CVE-2023-2786 (published 2023-06-16T08:43:49.826Z)
Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post a message in a channel to actually post it by executing channel commands.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.10.0, 7.1.10, 7.8.5, 7.9.4, 7.10.1