Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v39f-3xwx-xg8f

Опубликовано: 03 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.

Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.

EPSS

Процентиль: 34%
0.00133
Низкий

2.7 Low

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 2.7
nvd
12 месяцев назад

Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.

CVSS3: 2.7
debian
12 месяцев назад

Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the Remo ...

EPSS

Процентиль: 34%
0.00133
Низкий

2.7 Low

CVSS3

Дефекты

CWE-200