Lucene search
K

CVE-2024-1942

🗓️ 29 Feb 2024 10:41:38Reported by MattermostType 
cve
 cve
🔗 web.nvd.nist.gov👁 239 Views

Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize metadata, allowing authenticated attacker to access posts in unauthorized channels

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Chainguard
CVE-2024-1942 vulnerabilities
1 May 202507:14
cgr
Circl
CVE-2024-1942
29 Feb 202412:31
circl
CNNVD
Mattermost Security Vulnerabilities
29 Feb 202400:00
cnnvd
Cvelist
CVE-2024-1942
29 Feb 202410:41
cvelist
EUVD
EUVD-2024-0657
3 Oct 202520:07
euvd
Github Security Blog
Mattermost allows attackers access to posts in channels they are not a member of
29 Feb 202412:31
github
NVD
CVE-2024-1942
29 Feb 202411:15
nvd
OSV
BIT-MATTERMOST-2024-1942
16 Dec 202407:16
osv
OSV
CGA-6GRP-P29G-G39R
25 Sep 202402:09
osv
OSV
CGA-FCMM-87QM-6J9X
25 Sep 202401:54
osv
Rows per page
NVD
Node
[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "9.2.4",
        "status": "affected",
        "version": "9.2.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.1.8",
        "status": "affected",
        "version": "8.1.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.3.0"
      },
      {
        "status": "unaffected",
        "version": "9.4"
      },
      {
        "status": "unaffected",
        "version": "9.3.1"
      },
      {
        "status": "unaffected",
        "version": "9.2.5"
      },
      {
        "status": "unaffected",
        "version": "8.1.9"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2024 17:06Current
4.3Medium risk
Vulners AI Score4.3
CVSS 3.14.3
EPSS0.00226
SSVC
239