CVE-2024-1952
Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can contr…
Published: 2024-02-29 · CVSS: 3.1 · CVSS 3.1
Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can control the ephemeral post update to access individual posts' contents in channels they are not a member of.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7