CVE-2023-43754

2023-11-2710:15:07

Google

osv.dev

mattermost

cve-2023-43754

vulnerability

archived channels

permalink preview

software

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting is disabled.

CPENameOperatorVersion
mattermost-servereq@mattermost/[email protected]
mattermost-servereq9.0.0-rc2
mattermost-servereq9.0.0
mattermost-servereq@mattermost/[email protected]
mattermost-servereq9.0.1-rc1
mattermost-servereq9.0.1

Name	Operator	Version
mattermost-server	eq	@mattermost/[email protected]
mattermost-server	eq	9.0.0-rc2
mattermost-server	eq	9.0.0
mattermost-server	eq	@mattermost/[email protected]
mattermost-server	eq	9.0.1-rc1
mattermost-server	eq	9.0.1

References

mattermost.com/security-updates