CVE-2024-1887 — Public channel post content accessible without membership when compliance export is enabled
Mattermost fails to check if compliance export is enabled when fetching posts of public channels allowing a user that is not a member of the public channel to fetch the posts, w…
Published: 2024-02-29 · CVSS: 4.3 · CVSS 3.1
Mattermost fails to check if compliance export is enabled when fetching posts of public channels allowing a user that is not a member of the public channel to fetch the posts, which will not be audited in the compliance export.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7