3.1
Low
CVE-2023-2797 Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by…
Description
Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mattermost Github Plugin | 7.10.0 | 7.10.1 |
| Mattermost Github Plugin 7.8 | earliest → 7.8.4 | 7.8.5 |
| Mattermost Github Plugin 7.1 | earliest → 7.1.9 | 7.1.10 |