CVE-2023-2787 (published 2023-06-16T08:55:39.391Z)
Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.


Affected products: Vendor: Mattermost
Product: Mattermost
Versions: 0, 0, 0, 7.10.0, 7.9.3, 7.8.4, 7.1.9, 7.10.1