https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T09:06:41.110588+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-37864 CVE-2021-37864 — Users can view the contents of an archived channel when access is explicitly denied by the system admin 2026-10-24T09:06:41.127039+00:00

Affected: Mattermost

Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.