Snyk Security Database

mattermost-redux is a Common code (API client, Redux stores, logic, utility functions) for building a Mattermost client

Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release in the permalink preview process. An attacker can access private channel content after losing channel access by viewing previously cached permalink previews.

PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF (and other) documents.

Affected versions of this package are vulnerable to Directory Traversal via the embedded_get() function if the derived output path is not supplied with args.output. An attacker can write arbitrary files to the filesystem by supplying crafted path input.

Affected versions of this package are vulnerable to Directory Traversal via the Script View Templates. An attacker can access sensitive file contents outside of the intended directories by leveraging the Java scripting engine in template rendering.

Note:

This is only exploitable if the application has a mapping for "/**" that results in view rendering, and where the view name is not explicitly specified.