Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-43754

Mattermost fails to check whether the  “Allow users to view archived channels”  setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting is disabled. 

Published

2023-11-27T10:15:07.657

Last Modified

2024-11-21T08:24:43.240

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mattermost mattermost ≤ 7.8.12 Yes
Application mattermost mattermost ≤ 8.1.3 Yes
Application mattermost mattermost ≤ 9.0.1 Yes
Application mattermost mattermost 9.1.0 Yes
References