CVE-2023-47858 (published 2024-01-02T09:54:25.057Z)
Mattermost fails to properly verify the permissions needed for viewing archived public channels,  allowing a member of one team to get details about the archived public channels of another team via the GET /api/v4/teams/<team-id>/channels/deleted endpoint.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 0, 8.1.7, 9.0.5, 9.1.4, 9.2.3