VDB
GHSA-f77j-wjfq-qgmp
GHSA-f77j-wjfq-qgmp
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Mattermost versions 10.11.x <= 10.11.10 Fail to invalidate cached permalink preview data when a user loses channel access which allows the user to continue viewing private channel content via previously cached permalink previews until cache reset or relogin.. Mattermost Advisory ID: MMSA-2026-00580
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Timeline
- Mar 16, 2026 CVE Published
- Apr 10, 2026 Security Advisory