An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mattermost_server | Mattermost | * | 4.10.9 (excluding) |
| Mattermost_server | Mattermost | 5.7.0 (including) | 5.7.3 (excluding) |
| Mattermost_server | Mattermost | 5.8.0 (including) | 5.8.2 (excluding) |
| Mattermost_server | Mattermost | 5.9.0 (including) | 5.9.1 (excluding) |
| Mattermost_server | Mattermost | 5.10.0-rc1 (including) | 5.10.0-rc1 (including) |
| Mattermost_server | Mattermost | 5.10.0-rc2 (including) | 5.10.0-rc2 (including) |
| Mattermost_server | Mattermost | 5.10.0-rc3 (including) | 5.10.0-rc3 (including) |
| Mattermost_server | Mattermost | 5.10.0-rc4 (including) | 5.10.0-rc4 (including) |
| Mattermost_server | Mattermost | 5.10.0-rc5 (including) | 5.10.0-rc5 (including) |
| Mattermost_server | Mattermost | 5.10.0-rc6 (including) | 5.10.0-rc6 (including) |