Lucene search

CVE-2024-41144

🗓️ 01 Aug 2024 15:13:15Reported by MattermostType

Mattermost CVE-2024-41144 sync post validation issu

Reporter	Title	Published	Views	Family All 9
Vulnrichment	CVE-2024-41144 Malicious remote can create/update/delete arbitrary posts in arbitrary channels	1 Aug 202414:05	–	vulnrichment
OSV	CVE-2024-41144	1 Aug 202415:15	–	osv
OSV	BIT-MATTERMOST-2024-41144	5 Sep 202419:14	–	osv
OSV	GO-2024-3023 Mattermost allows remote actor to create/update/delete posts in arbitrary channels in github.com/mattermost/mattermost-server	6 Aug 202422:03	–	osv
OSV	GHSA-VG67-CHM7-8M3J Mattermost allows remote actor to create/update/delete posts in arbitrary channels	1 Aug 202415:32	–	osv
NVD	CVE-2024-41144	1 Aug 202415:15	–	nvd
Cvelist	CVE-2024-41144 Malicious remote can create/update/delete arbitrary posts in arbitrary channels	1 Aug 202414:05	–	cvelist
Github Security Blog	Mattermost allows remote actor to create/update/delete posts in arbitrary channels	1 Aug 202415:32	–	github
Veracode	Improper Access Control	9 Aug 202406:00	–	veracode

Nvd

Node

mattermost mattermost_serverRange9.5.0–9.5.7

mattermost mattermost_serverRange9.7.0–9.7.6

mattermost mattermost_serverRange9.8.0–9.8.2

mattermost mattermost_serverMatch9.9.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "status": "affected",
        "version": "9.9.0"
      },
      {
        "lessThanOrEqual": "9.5.6",
        "status": "affected",
        "version": "9.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.7.5",
        "status": "affected",
        "version": "9.7.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.8.1",
        "status": "affected",
        "version": "9.8.0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "9.10.0"
      },
      {
        "status": "unaffected",
        "version": "9.9.1"
      },
      {
        "status": "unaffected",
        "version": "9.5.7"
      },
      {
        "status": "unaffected",
        "version": "9.7.6"
      },
      {
        "status": "unaffected",
        "version": "9.8.2"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2024 15:15Current

7.1High risk

Vulners AI Score7.1

CVSS35.5 - 7.1

EPSS0.00135

SSVC

CWE-284