CVE-2024-10241

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-10241

Severity

4.3

Medium

CVSS V3

Description

Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled which allows a user to get private channel names by using cmd+K/ctrl+K.

References

https://images.chainguard.dev/security/CGA-j8jm-x58p-pxgr
https://github.com/advisories/GHSA-6mvp-gh77-7vwh
https://images.chainguard.dev/security/CGA-gjw8-2vp5-7xfj
https://images.chainguard.dev/security/CGA-7r67-3728-67cm
https://images.chainguard.dev/security/CGA-8wgx-g78c-w984
https://images.chainguard.dev/security/CGA-8337-6mm5-7ph7
https://images.chainguard.dev/security/CGA-fc92-5hj6-c6vv
https://images.chainguard.dev/security/CGA-72g3-2cvf-rwvj
https://images.chainguard.dev/security/CGA-936x-m3mr-4jcq
https://images.chainguard.dev/security/CGA-7c8x-25wj-hf88
https://images.chainguard.dev/security/CGA-2pqc-hfpv-9637
https://images.chainguard.dev/security/CGA-6234-3p5r-87qf
https://images.chainguard.dev/security/CGA-69fh-hfv2-9qrg
https://mattermost.com/security-updates

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal