Mattermost · Mattermost · CVE-2024-39807
**Name of the Vulnerable Software and Affected Versions**
Mattermost versions 9.5.x through 9.5.5
Mattermost version 9.8.0
**Description**
The issue arises from the improper sanitization of recipients of a webhook event, allowing an attacker who is monitoring these events to obtain the channel IDs of archived or restored channels.
**Recommendations**
For Mattermost versions 9.5.x through 9.5.5, update to a version later than 9.5.5 to resolve the issue.
For Mattermost version 9.8.0, update to a version later than 9.8.0 to resolve the issue.