CVE-2023-2792

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command...

CVE-2023-2792 Ephemeral messages return private channel contents in permalink previews

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command...

CVE-2023-2792

Mattermost Server contains a vulnerability where ephemeral error messages are not sanitized, allowing an attacker to disclose arbitrary private channel message contents via a specially crafted /groupmsg command. Affected product: Mattermost Server; vulnerability in error message handling leads to...