/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-h598-9mvg-jmw9

Published

Last updated

https://images.chainguard.dev/security/CGA-h598-9mvg-jmw9
Package

mattermost-10.5

RepositoryWolfi
Latest Update
Not affected
Aliases
  • CVE-2024-1887
  • GHSA-fx48-xv6q-6gp3

Severity

Unknown

Summary

Mattermost post fetching without auditing in compliance export

Description

Mattermost fails to check if compliance export is enabled when fetching posts of public channels allowing a user that is not a member of the public channel to fetch the posts, which will not be audited in the compliance export. 

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-1887

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs