GHSA-jj46-9cgh-qmfx
GitHub Security Advisory
Mattermost Improper Access Control vulnerability
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to override the username and profile picture when posting, a member could also override the username and icon when making a post even if the Hardened Mode setting was enabled
Affected Packages
Go
github.com/mattermost/mattermost/server/v8
Affected versions:
0
(fixed in 8.1.4)
Go
github.com/mattermost/mattermost-server/v6
Affected versions:
0
(fixed in 7.8.13)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: August 2, 2025 6:46 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.