github.com/mattermost/mattermost/server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.1

CVE-2023-6458

Client side path traversal due to lack of route parameters validation

Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.

Mattermost Mattermost github.com/mattermost/mattermost-server/v6 github.com/mattermost/mattermost/server/v8 Go

Dec 6, 2023