CVE-2024-39807

Name of the Vulnerable Software and Affected Versions Mattermost versions 9.5.x through 9.5.5 Mattermost version 9.8.0

Description The issue arises from the improper sanitization of recipients of a webhook event, allowing an attacker who is monitoring these events to obtain the channel IDs of archived or restored channels.

Recommendations For Mattermost versions 9.5.x through 9.5.5, update to a version later than 9.5.5 to resolve the issue. For Mattermost version 9.8.0, update to a version later than 9.8.0 to resolve the issue.