CVE-2023-47858
Details of archived public channels are leaked to members of another team
Résumé
Details of archived public channels are leaked to members of another team
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to properly verify the permissions needed for viewing archived public channels, allowing a member of one team to get details about the archived public channels of another team via the GET /api/v4/teams//channels/deleted endpoint.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com