Beveiligingsadvies

CVE-2024-1952

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-29 10:42:15

Laatst bijgewerkt 2025-04-22 15:52:35

Toegewezen door Mattermost

CVSS-score 3.1

Status PUBLISHED

Beschrijving

Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can control the ephemeral post update to access individual posts' contents in channels they are not a member of.

← Alle CVE's bekijken Bekijk op cve.org ↗