UpHeron
All vulnerabilities

Servers and applications

CVE-2021-37864

Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.

Severity
Medium 6.5
Published
18 Jan 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MattermostServers and applications · cpe:a:mattermost:mattermost
  • Every version up to 6.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-37864
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-37864