Lucene search

CVE-2024-36241

🗓️ 26 May 2024 14:09:15Reported by MattermostType

Mattermost versions fail to enforce access controls, allowing viewing arbitrary post content

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Veracode	Improper Access Control	28 May 202410:01	–	veracode
Cvelist	CVE-2024-36241 /playbook add slash command allows viewing arbitrary post contents	26 May 202413:32	–	cvelist
Vulnrichment	CVE-2024-36241 /playbook add slash command allows viewing arbitrary post contents	26 May 202413:32	–	vulnrichment
NVD	CVE-2024-36241	26 May 202414:15	–	nvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "9.5.3",
        "status": "affected",
        "version": "9.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.6.1",
        "status": "affected",
        "version": "9.6.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.1.12",
        "status": "affected",
        "version": "8.1.0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "9.7.0"
      },
      {
        "status": "unaffected",
        "version": "9.5.4"
      },
      {
        "status": "unaffected",
        "version": "9.6.2"
      },
      {
        "status": "unaffected",
        "version": "8.1.13"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 May 2024 14:15Current

4.1Medium risk

Vulners AI Score4.1

CVSS33.1

EPSS0.00068

SSVC

CWE-284