| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost | ≥ 9.5.0, < 9.5.6≥ 9.8.0, < 9.8.1 | 9.5.69.8.1 |
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to properly sanitize the recipients of a webhook event which allows an attacker monitoring webhook events to retrieve the channel IDs of archived or restored channels.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free