Description
Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mattermost | Mattermost Github Plugin | ≤ 7.1.9, ≤ 7.8.4, 7.10.0 | 7.1.10 |