CVE-2023-2792 — Ephemeral messages return private channel contents in permalink previews
Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.
Published: 2023-06-16 · CVSS: 6.5 · CVSS 3.1
Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7