Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-45223 · ADVISORY
• mattermost/mattermost · PACKAGE
• mattermost.com/security-updates · WEB

github.com/mattermost/mattermost-server/v6 のその他の脆弱性

• CVE-2026-8823低 3.8Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-pr…
• CVE-2026-7387高 8.8Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management…
• CVE-2026-7184中 6.5Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operat…
• CVE-2026-6961高 7.6Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name …
• CVE-2026-6739高 7.2Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission whe…