Description
Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost Github Plugin
Default version status: unaffected
0 to ≤ 7.1.9affected0 to ≤ 7.8.4affected7.1.10unaffected7.8.5unaffected7.10.0affected7.10.1unaffected