Threats tagged 'ghsa-8jc7-6qx5-pfvj'

Mattermost versions 11.7.x up to 11.7.10 contain a vulnerability where reserved system post types are not properly validated during scheduled post creation and publication. This flaw allows an authenticated channel member to publish messages that appear as trusted system events via the scheduled post endpoint. The vulnerability has a low severity rating and does not impact confidentiality or availability.