Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-6458

Client side path traversal due to lack of route parameters validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Mattermost

Description

Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mattermost Mattermost

Default version status: unaffected

  • 0 to ≤ 9.1.1affected
  • 0 to ≤ 9.0.2affected
  • 0 to ≤ 8.1.4affected
  • 0 to ≤ 7.8.13affected
  • 9.1.2unaffected
  • 9.0.3unaffected
  • 8.1.5unaffected
  • 7.8.14unaffected

References