Beveiligingsadvies

CVE-2024-47003

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-26 08:05:16
Laatst bijgewerkt 2024-09-26 13:11:00
Toegewezen door Mattermost
CVSS-score 3.1
Status PUBLISHED

Beschrijving

Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.