Логотип exploitDog
bind:CVE-2024-1942
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-1942

Количество 3

Количество 3

nvd логотип

CVE-2024-1942

почти 2 года назад

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under specific conditions, which allows an authenticated attacker to access the contents of individual posts in channels they are not a member of.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2024-1942

почти 2 года назад

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-hwjf-4667-gqwx

почти 2 года назад

Mattermost allows attackers access to posts in channels they are not a member of

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-1942

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under specific conditions, which allows an authenticated attacker to access the contents of individual posts in channels they are not a member of.

CVSS3: 4.3
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-1942

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 ...

CVSS3: 4.3
0%
Низкий
почти 2 года назад
github логотип
GHSA-hwjf-4667-gqwx

Mattermost allows attackers access to posts in channels they are not a member of

CVSS3: 4.3
0%
Низкий
почти 2 года назад

Уязвимостей на страницу