CVE-2022-1384

Publication date

2022-04-19 20:26:28

Family

Mattermost

State

PUBLISHED

Description

Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities.