| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 8.1.0, < 8.1.13≥ 9.5.0, < 9.5.4≥ 9.6.0, < 9.6.2 | 8.1.139.5.49.6.2 |
Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper access control which allows a guest to get the metadata of a public playbook run that linked to the channel they are guest via sending an RHSRuns GraphQL query request to the server
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free