| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost | = 6.6.0= 6.6.1= 6.7.0≥ 6.4.0, ≤ 6.5.1< 6.3.8 | 6.3.8 |
The Guest account feature in Mattermost version 6.7.0 and earlier fails to properly restrict the permissions, which allows a guest user to fetch a list of all public channels in the team, in spite of not being part of those channels.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free