Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manager
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5194.json"