← All credits
Pyae Phyo (pyae_phyo)
5 vulnerability records and advisories credit this contributor.
CVE-2023-4107
Incorrect authorization allows a user manager to update a system admin
CVE-2023-5159
A User Manager role with user edit permissions could manage/update bots
CVE-2023-5193
System Role with manage posts permission can read posts of Direct Messages
CVE-2023-5194
A system/user manager can demote / deactivate another manager
CVE-2023-45223
Users full name disclosure through Mattermost Boards with Show Full Name Option disabled