CVE-2023-1777 (published 2023-03-31T11:35:22.813Z)
Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 6.3.0, 6.3.0, 6.3.0, 7.8.1, 7.7.2, 7.1.6