Description (CNA)
Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.9.x <= 10.9.2 fails to sanitize path traversal sequences in template file destination paths, which allows a system admin to perform path traversal attacks via malicious path components, potentially enabling malicious file placement outside intended directories.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mattermost / Mattermost | affected 10.8.0 through 10.8.3; affected 10.5.0 through 10.5.8; affected 9.11.0 through 9.11.17; affected 10.9.0 through 10.9.2; unaffected 10.10.0; unaffected 10.8.4; unaffected 10.5.9; unaffected 9.11.18; unaffected 10.9.3 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.
No references supplied.