CVE-2024-47145
Unauthorized access on archived channels via file links
Résumé
Unauthorized access on archived channels via file links
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com