CVE-2023-1777: Mattermost Server

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message.

Affected products

• Mattermost Mattermost Server: before 7.1.6 (fixed in 7.1.6); version 7.7.1 only; version 7.8.0 only

Published 2023-03-31. Last modified 2026-06-17.