CVE-2026-1629
Permalink Preview Information Disclosure After Permission Revocation
Résumé
Permalink Preview Information Disclosure After Permission Revocation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing private channel content via previously cached permalink previews until cache reset or relogin.. Mattermost Advisory ID: MMSA-2026-00580
Références
- advisory github.com
- advisory mattermost.com
- advisory nvd.nist.gov