Vulnerability Database
289,784
Total vulnerabilities in the database
CVE-2023-6459
Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the channelID, the public /metrics endpoint is revealing channelIDs.
| Software | From | Fixed in |
|---|---|---|
github.com/mattermost/mattermost-server/v6
|
- | 7.8.14 |
|
github.com/mattermost/mattermost/server/v8
|
- | 8.1.5 |
| mattermost / mattermost_server | 8.0.0 | 8.1.5 |
| mattermost / mattermost_server | - | 7.8.14 |