Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.