| Package | Affected versions | Patched versions |
|---|---|---|
| mattermost server | ≥ 8.1.0, < 8.1.13≥ 9.5.0, < 9.5.4≥ 9.6.0, < 9.6.2 | 8.1.139.5.49.6.2 |
Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1, 8.1.x <= 8.1.12 fail to restrict the audience of the "custom_playbooks_playbook_run_updated" webhook event, which allows a guest on a channel with a playbook run linked to see all the details of the playbook run when the run is marked by finished.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free