Beveiligingsadvies

CVE-2022-1384

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-19 20:26:28
Laatst bijgewerkt 2024-12-06 23:09:22
Toegewezen door Mattermost
CVSS-score 4.7
Status PUBLISHED

Beschrijving

Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities.