CVE-2023-2797
Path traversal in GitHub plugin's code preview feature
Résumé
Path traversal in GitHub plugin's code preview feature
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com