Mattermost: >> Mattermost Server >> 7.8.0 Security Vulnerabilities
Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config).
CVSS Score
7.2
EPSS Score
0.001
Published
2023-04-17
Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-03-31
Page 5