Lucene search

CVE-2024-5272 Run Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"

🗓️ 26 May 2024 13:57:29Reported by MattermostType

CVE-2024-5272 Mattermost webhook event security vulnerabilit

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-5272 Run Details leak to guest via webhook event "custom_playbooks_playbook_run_updated"	26 May 202413:29	–	vulnrichment
CVE	CVE-2024-5272	26 May 202414:15	–	cve
NVD	CVE-2024-5272	26 May 202414:15	–	nvd
Veracode	Improper Access Control	29 May 202406:05	–	veracode
CNVD	Mattermost Server Access Control Error Vulnerability (CNVD-2024-26102)	28 May 202400:00	–	cnvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Mattermost",
    "vendor": "Mattermost",
    "versions": [
      {
        "lessThanOrEqual": "9.5.3",
        "status": "affected",
        "version": "9.5.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.6.1",
        "status": "affected",
        "version": "9.6.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.1.12",
        "status": "affected",
        "version": "8.1.0",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "9.7.0"
      },
      {
        "status": "unaffected",
        "version": "9.5.4"
      },
      {
        "status": "unaffected",
        "version": "9.6.2"
      },
      {
        "status": "unaffected",
        "version": "8.1.13"
      }
    ]
  }
]

Source	Link
mattermost	www.mattermost.com/security-updates

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 May 2024 13:29Current

4.6Medium risk

Vulners AI Score4.6

CVSS34.3

EPSS0.00043

CWE-284