Path Traversal

Mattermost is vulnerable to Path Traversal. The vulnerability is due to insufficient input sanitization caused by failure to validate file attachment paths in the bulk import JSONL file, allowing a system admin to read arbitrary system files via path traversal...