Lucene search
MattermostCVELIST:CVE-2024-39353HistoryJul 03, 2024 - 8:37 a.m.
CVE-2024-39353 RemoteClusterFrame payloads are audit logged in full
2024-07-0308:37:16
CWE-200
Mattermost
www.cve.org
4
cve-2024-39353
mattermost
audit logging
message contents
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
14.2%
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Mattermost",
"vendor": "Mattermost",
"versions": [
{
"status": "affected",
"version": "9.8.0"
},
{
"lessThanOrEqual": "9.5.5",
"status": "affected",
"version": "9.5.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "9.9.0"
},
{
"status": "unaffected",
"version": "9.8.1"
},
{
"status": "unaffected",
"version": "9.5.6"
}
]
}
]References
Related
vulnrichment
vulnrichment
CVE-2024-39353 RemoteClusterFrame payloads are audit logged in full
2024-07-03 08:37:16
osv
osv
CVE-2024-39353
2024-07-03 09:15:06
nvd
nvd
CVE-2024-39353
2024-07-03 09:15:06
veracode
veracode
Information Disclosure
2024-07-04 08:46:59
cve
cve
CVE-2024-39353
2024-07-03 09:15:06
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
14.2%
Related for CVELIST:CVE-2024-39353