Mattermost Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-45223 · ADVISORY
• mattermost/mattermost · PACKAGE
• mattermost.com/security-updates · WEB

Lỗ hổng khác của github.com/mattermost/mattermost-server/v6

• CVE-2026-8823THẤP 3.8Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-pr…
• CVE-2026-7387CAO 8.8Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management…
• CVE-2026-7184TRUNG BÌNH 6.5Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operat…
• CVE-2026-6961CAO 7.6Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name …
• CVE-2026-6739CAO 7.2Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission whe…