Skip to content
OpenAdvisories
Medium · 4.2 CVE-2023-3586 EUVD-2023-44236GHSA-6wc4-xc3f-782r

Disabling publicly-shared boards does not disable existing publicly available board links

Published Jul 17, 2023 · Updated Oct 22, 2024 · Assigned by Mattermost

Description

Mattermost fails to disable public Boards after the "Enable Publicly-Shared Boards" configuration option is disabled, resulting in previously-shared public Boards to remain accessible.

Affected products

VendorProductAffectedFixed
Mattermost Mattermost ≤ 7.8.6, ≤ 7.9.4, ≤ 7.10.2 7.8.7

Advisories 1

References