CVE-2023-5194 Information

Description

Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager

Reference

https://mattermost.com/security-updates