Description
Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mattermost Mattermost
Default version status: unaffected
10.5.0 to ≤ 10.5.1affected10.4.0 to ≤ 10.4.3affected9.11.0 to ≤ 9.11.9affected10.6.0unaffected10.5.2unaffected10.4.4unaffected9.11.10unaffected