| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-server | ≥ 1.4.1-0.20211025164829-f7a8147b825c, < 1.4.1-0.20230301145909-10be118d99a5≥ 7.1.0, < 7.1.6≥ 7.7.0, < 7.7.2≥ 7.8.0, < 7.8.1 | 1.4.1-0.20230301145909-10be118d99a57.1.67.7.27.8.1 |
| github.com/mattermost/mattermost-server/v6 | ≥ 6.0.0-20211025164829-f7a8147b825c, < 6.0.0-20230301145909-10be118d99a5≥ 6.3.0, < 7.1.6 | 6.0.0-20230301145909-10be118d99a57.1.6 |
| mattermost server | = 7.7.1= 7.8.0< 7.1.6 | 7.1.6 |
Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free