CVE-2023-2797 (published 2023-06-16T09:03:17.656Z)
Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.



Affected products: Vendor: Mattermost
Product: Mattermost Github Plugin
Versions: 0, 0, 7.1.10, 7.8.5, 7.10.0, 7.10.1