Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-6458

Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.

Published

2023-12-06T09:15:08.907

Last Modified

2024-11-21T08:43:53.947

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-74
  • Type: Primary
    CWE-22
    CWE-74
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mattermost mattermost_server < 7.8.14 Yes
Application mattermost mattermost_server < 8.1.5 Yes
Application mattermost mattermost_server < 9.0.3 Yes
Application mattermost mattermost_server < 9.1.2 Yes
References