Beveiligingsadvies

CVE-2024-47145

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-26 08:01:48
Laatst bijgewerkt 2024-09-26 13:12:52
Toegewezen door Mattermost
CVSS-score 3.1
Status PUBLISHED

Beschrijving

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.