Command injection

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command...

PT-2023-21419

Name of the Vulnerable Software and Affected Versions Mattermost affected versions not specified Description The issue allows an attacker to obtain arbitrary message contents by using a specially crafted /groupmsg command, due to the failure to sanitize ephemeral error messages. Recommendations A...

CVE-2023-2792: Exposure of Sensitive Information to an Unauthorized Actor

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command...