| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 7.10.0, < 7.10.3≥ 7.8.0, < 7.8.5 | 7.10.37.8.5 |
Mattermost fails to properly check the authorization of POST /api/v4/teams when passing a team override scheme ID in the request, allowing an authenticated attacker with knowledge of a Team Override Scheme ID to create a new team with said team override scheme.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free