Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/07/14 5:25 p.m.25 views

CVE-2022-2408 Guest accounts can list all public channels

The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels...

4.3CVSS4.9AI score0.0057EPSS
SaveExploits0References1
Rows per page
Query Builder