7.8.0

DATE	CVE	VULNERABILITY TITLE	RISK
2023-04-17	CVE-2023-1831	Cleartext Transmission of Sensitive Information vulnerability in Mattermost Server Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other operations if the experimental audit logging configuration was enabled (ExperimentalAuditSettings section in config). network low complexity mattermost CWE-319	7.5
2023-03-31	CVE-2023-1777	Exposure of Resource to Wrong Sphere vulnerability in Mattermost Server Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosing the contents of the linked message. network low complexity mattermost CWE-668	5.3