CVE-2023-2792 (published 2023-06-16T09:01:43.650Z)
Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a specially crafted /groupmsg command.



Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.10.0, 7.1.10, 7.9.4, 7.8.5, 7.10.1