An issue was discovered in Mattermost Server before 5.7. It allows a bypass of e-mail address discovery restrictions.
- https://mattermost.com/security-updates/
No PoCs found on GitHub currently.