DirectorySecurity Advisories
Sign In
Security Advisories

CGA-6grp-p29g-g39r

Published

Last updated

https://images.chainguard.dev/security/CGA-6grp-p29g-g39r
Package

mattermost-9.11

Latest Update
Not affected
Aliases
  • CVE-2024-1942
  • GHSA-hwjf-4667-gqwx

Severity

4.3

Medium

CVSS V3

Summary

Mattermost allows attackers access to posts in channels they are not a member of

Description

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under specific conditions, which allows an authenticated attacker to access the contents of individual posts in channels they are not a member of.

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-1942
  • https://github.com/advisories/GHSA-hwjf-4667-gqwx
  • https://github.com/mattermost/mattermost
  • https://mattermost.com/security-updates

Updates

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsOpen SourceCareersNewsroomLegal

Resources

Unchained BlogResearchEventsTrust CenterDocumentation