Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary file read by system admin via path traversal
Vulnerability Description
Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Mattermost 安全漏洞
Vulnerability Description
Mattermost是美国Mattermost公司的一个开源协作平台。 Mattermost存在安全漏洞，该漏洞源于批量导入JSONL文件中文件附件路径未清理，可能导致系统管理员通过路径遍历读取任意系统文件。以下版本受到影响：10.8.1及之前的10.8.x版本、10.7.3及之前的10.7.x版本、10.5.7及之前的10.5.x版本、9.11.16及之前的9.11.x版本。
CVSS Information
N/A
Vulnerability Type
N/A