CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
9.0%
github.com/mattermost/mattermost/ is vulnerable to Improper Access Control. The vulnerability is due to a failure in restricting the access of files attached to posts in an archived channel even if the Allow users to view archived channels
option is disabled. This may lead to leak of sensitive information contained within the files.