Mattermost fails to check channel membership when accessing message threads, allowing an malicious user to access arbitrary posts by using the message threads API.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mattermost mattermost |
||
mattermost mattermost 7.10.0 |