← CVE Intelligence

CVE-2023-6458

Client side path traversal due to lack of route parameters validation PUBLISHED

Description (CNA)

Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 9.1.1; affected 0 through 9.0.2; affected 0 through 8.1.4; affected 0 through 7.8.13; unaffected 9.1.2; unaffected 9.0.3; unaffected 8.1.5; unaffected 7.8.14

CWE

CWE-74

References

ADP enrichment

CVE

No English description supplied.