Ilent0

**Name of the Vulnerable Software and Affected Versions** Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 **Description** Finished playbook runs fail to enforce run-state validation during write operations. This allows a run participant to modify the status, checklists, retrospective content, ownership, and participants of completed runs through REST and GraphQL API requests. **Recommendations** Update Mattermost versions 11.7.0 through 11.7.6 to a version newer than 11.7.6. Update Mattermost versions 10.11.0 through 10.11.21 to a version newer than 10.11.21.

**Name of the Vulnerable Software and Affected Versions** Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 Mattermost versions 11.8.0 through 11.8.3 **Description** The Boards plugin fails to reconcile `SchemeAdmin` flags with a user's current role. This allows a user who has been demoted to System Guest to retain Board Admin privileges, enabling them to perform administrative operations through the UI or the Boards REST API. **Recommendations** Update Mattermost versions 11.7.0 through 11.7.6 to a version newer than 11.7.6. Update Mattermost versions 10.11.0 through 10.11.21 to a version newer than 10.11.21. Update Mattermost versions 11.8.0 through 11.8.3 to a version newer than 11.8.3.

**Name of the Vulnerable Software and Affected Versions** Mattermost versions 11.7.0 through 11.7.6 Mattermost versions 10.11.0 through 10.11.21 **Description** Insufficient validation during the board archive import process allows a board member to escalate a guest user to Board Admin privileges by importing a specially crafted `.boardarchive` file. **Recommendations** Update Mattermost versions 11.7.0 through 11.7.6 to a version newer than 11.7.6. Update Mattermost versions 10.11.0 through 10.11.21 to a version newer than 10.11.21.