Mattermost Authorization Issue Vulnerability (CNVD-2024-14307)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization problem vulnerability that stems from an inability to properly verify account ownership, which can be exploited by an authenticated attacker to take over another user’s account under certain conditions via a crafted switch request.