Beveiligingsadvies

CVE-2026-24692

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-16 14:56:45

Laatst bijgewerkt 2026-03-16 18:19:26

Toegewezen door Mattermost

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users without read permissions to access posts and files in channels via search API requests. Mattermost Advisory ID: MMSA-2025-00554

← Alle CVE's bekijken Bekijk op cve.org ↗