CVE-2023-2787

Publication date

2023-06-16 08:55:39

Family

Mattermost

State

PUBLISHED

Description

Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.