An issue exists in Mattermost Server prior to 5.15.0. Login access control can be bypassed via crafted input.
mattermost mattermost server
mattermost mattermost server 5.9.0