Vulnerability Details CVE-2023-43754
Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowing members to view permalink previews of archived channels even if the “Allow users to view archived channels” setting is disabled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.9%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2023-43754
-
cpe:2.3:a:mattermost:mattermost:*
-
cpe:2.3:a:mattermost:mattermost:-
-
cpe:2.3:a:mattermost:mattermost:1.21.0
-
cpe:2.3:a:mattermost:mattermost:1.21.1
-
cpe:2.3:a:mattermost:mattermost:1.21.2
-
cpe:2.3:a:mattermost:mattermost:1.22.0
-
cpe:2.3:a:mattermost:mattermost:1.22.1
-
cpe:2.3:a:mattermost:mattermost:1.23.0
-
cpe:2.3:a:mattermost:mattermost:1.23.1
-
cpe:2.3:a:mattermost:mattermost:1.24.0
-
cpe:2.3:a:mattermost:mattermost:1.25.0
-
cpe:2.3:a:mattermost:mattermost:1.25.1
-
cpe:2.3:a:mattermost:mattermost:1.26.0
-
cpe:2.3:a:mattermost:mattermost:1.26.1
-
cpe:2.3:a:mattermost:mattermost:1.26.2
-
cpe:2.3:a:mattermost:mattermost:1.27.0
-
cpe:2.3:a:mattermost:mattermost:1.27.1
-
cpe:2.3:a:mattermost:mattermost:1.28.0
-
cpe:2.3:a:mattermost:mattermost:1.29.0
-
cpe:2.3:a:mattermost:mattermost:1.30.0
-
cpe:2.3:a:mattermost:mattermost:1.30.1
-
cpe:2.3:a:mattermost:mattermost:1.31.0
-
cpe:2.3:a:mattermost:mattermost:1.31.1
-
cpe:2.3:a:mattermost:mattermost:1.31.2
-
cpe:2.3:a:mattermost:mattermost:1.32.0
-
cpe:2.3:a:mattermost:mattermost:1.32.1
-
cpe:2.3:a:mattermost:mattermost:1.32.2
-
cpe:2.3:a:mattermost:mattermost:1.33.0
-
cpe:2.3:a:mattermost:mattermost:1.33.1
-
cpe:2.3:a:mattermost:mattermost:1.34.0
-
cpe:2.3:a:mattermost:mattermost:1.34.1
-
cpe:2.3:a:mattermost:mattermost:1.35.0
-
cpe:2.3:a:mattermost:mattermost:1.35.1
-
cpe:2.3:a:mattermost:mattermost:1.36.0
-
cpe:2.3:a:mattermost:mattermost:1.37.0
-
cpe:2.3:a:mattermost:mattermost:1.38.0
-
cpe:2.3:a:mattermost:mattermost:1.38.1
-
cpe:2.3:a:mattermost:mattermost:1.39.0
-
cpe:2.3:a:mattermost:mattermost:1.40.0
-
cpe:2.3:a:mattermost:mattermost:1.41.0
-
cpe:2.3:a:mattermost:mattermost:1.41.1
-
cpe:2.3:a:mattermost:mattermost:9.1.0