Mattermost Improper Channel Archive Access Vulnerability

A vulnerability exists in Mattermost versions prior to 11.0, where the application fails to properly enforce the setting that allows users to view archived channels. This oversight enables regular users to access content and files from archived channels through the 'Open in Channel' feature within followed threads.

Impact

Exploitation of this vulnerability allows unauthorized access to archived channel content and files, potentially leading to the disclosure of sensitive information.

Remediation

Users can upgrade to Mattermost version 11.1.011.0.310.12.210.11.510.5.13 to address this vulnerability.