NetSight
low3.1

CVE-2023-2797

Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a chan…

Impact

Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.

Affected products

VendorProductAffected versions
MattermostMattermost
from 7.1.0 through 7.1.9
from 7.8.0 through 7.8.4
Version 7.10.0

Weakness classification

References