UpHeron
All vulnerabilities

Servers and applications

CVE-2023-43754

Mattermost fails to check whether the  “Allow users to view archived channels”  setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting is disabled.

Severity
Medium 4.3
Published
27 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
MattermostServers and applications · cpe:a:mattermost:mattermost
  • Every version up to 7.8.12
  • From 8.0.0 up to 8.1.3
  • From 9.0.0 up to 9.0.1
  • Version 9.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-43754
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-43754