CVE-2023-2792

Mattermost Server contains a vulnerability where ephemeral error messages are not sanitized, allowing an attacker to disclose arbitrary private channel message contents via a specially crafted /groupmsg command. Affected product: Mattermost Server; vulnerability in error message handling leads to...