← Database

CVE-2024-40884

LOW CVSS: 2.7 Published: 2024-08-22 Modified: 2026-06-17

Description

Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to properly enforce permissions which allows a team admin user without "Add Team Members" permission to disable the invite URL.

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-284, NVD-CWE-noinfo

References