CVE-2023-2797
Path traversal in GitHub plugin's code preview feature
Summary
Path traversal in GitHub plugin's code preview feature
Original description
The description as published by the source.
Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.
References
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com