Threats tagged 'ghsa-x3hx-ch7p-8xgg'

Mattermost server versions prior to 11.0.0-alpha.1 and 8.0.0-20250815165020-c8d66301415d do not properly enforce the "Allow users to view archived channels" setting. This flaw allows regular users to access archived channel content and files through the "Open in Channel" feature from followed threads. The vulnerability has a low severity score and does not impact integrity or availability.