Mattermost Google Drive Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:mattermost_google_drive_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Mattermost Google Drive Plugin (61c3dbe5-35d8-55df-94c1-8b2e28648391) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-2299 |
vulnerable | 2026-07-29 00:37:44.599214 |
Improper Access Control in Mattermost Google Drive Plugin File Creation Endpoint
MEDIUM (4.2)
The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private channels and disclose private channel membership.
Published: 2026-06-25T18:55:11.905Z
Updated: 2026-06-26T14:05:09.476Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.