CVE-2023-6458 (published 2023-12-06T08:10:18.481Z)
Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 0, 9.1.2, 9.0.3, 8.1.5, 7.8.14