Beveiligingsadvies

CVE-2024-32046

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-26 08:24:50
Laatst bijgewerkt 2024-08-02 02:06:42
Toegewezen door Mattermost
CVSS-score 4.3
Status PUBLISHED

Beschrijving

Mattermost versions 9.6.x <= 9.6.0, 9.5.x <= 9.5.2, 9.4.x <= 9.4.4 and 8.1.x <= 8.1.11 fail to remove detailed error messages in API requests even if the developer mode is off which allows an attacker to get information about the server such as the full path were files are stored