Total vulnerabilities in the database
Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary posts by using the message threads API.
| Software | From | Fixed in |
|---|---|---|
| mattermost / mattermost | 7.9.0 | 7.9.3.x |
| mattermost / mattermost | 7.8.0 | 7.8.4.x |
| mattermost / mattermost | 7.1.0 | 7.1.9.x |
| mattermost / mattermost | 7.10.0 | 7.10.0.x |