DirectorySecurity Advisories
Sign In
Security Advisories

CGA-fcmm-87qm-6j9x

Published

Last updated

https://images.chainguard.dev/security/CGA-fcmm-87qm-6j9x
Package

mattermost-10.0

Latest Update
Not affected
Aliases
  • CVE-2024-1942
  • GHSA-hwjf-4667-gqwx

Severity

4.3

Medium

CVSS V3

Summary

Mattermost allows attackers access to posts in channels they are not a member of

Description

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under specific conditions, which allows an authenticated attacker to access the contents of individual posts in channels they are not a member of.

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-1942

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images