CVE-2022-1385 — Invitation Email is resent as a Reminder after invalidating pending email invites

CVE-2022-1385

Invitation Email is resent as a Reminder after invalidating pending email invites PUBLISHED

Description (CNA)

Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from the system console, which allows accidentally invited users to join the workspace and access information from the public teams and channels.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected unspecified before 6.5.0

CWE

CWE-664

References

https://mattermost.com/security-updates/
https://hackerone.com/reports/1486820

ADP enrichment

CVE

No English description supplied.

https://mattermost.com/security-updates/
https://hackerone.com/reports/1486820

CISA-ADP

No English description supplied.

No references supplied.