CVE-2023-4105

Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message...

CVE-2023-4105

Mattermost Server vulnerability CVE-2023-4105: In Mattermost Server 7.x prior to 7.8.8, 7.9.x prior to 7.9.6, and 7.10.x prior to 7.10.4, attachments are not removed when deleting a thread message, allowing a simple user to still access/download the deleted message’s attachment. Root cause: failu...

CVE-2023-4105 Attachment of deleted message in a thread remains accessible and downloadable

Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message...

CVE-2023-4105 Attachment of deleted message in a thread remains accessible and downloadable

Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of a deleted message...