An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage.
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mattermost_server | Mattermost | * | 5.18.0 (excluding) |