CVE-2024-21848

Publication date

2024-04-05 08:13:01

Family

Mattermost

State

PUBLISHED

Description

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel