Lucene search
HistoryAug 22, 2024 - 7:15 a.m.
CVE-2024-32939
mattermost
version 9.9.x
security vulnerability
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
17.7%
Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2, when shared channels are enabled, fail to redact remote users’ original email addresses stored in user props when email addresses are otherwise configured not to be visible in the local server."
Affected configurations
Node
mattermostmattermostRange9.5.0–9.5.8
ORmattermostmattermostRange9.8.0–9.8.3
ORmattermostmattermostRange9.9.0–9.9.2
ORmattermostmattermostRange9.10.0–9.10.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mattermost | mattermost | * | cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:* |
References
Related
osv
osv
Mattermost doesn't redact remote users' original email addresses
2024-08-22 09:30:32
CVE-2024-32939
2024-08-22 07:15:03
veracode
veracode
Improper Access Control
2024-08-23 07:54:07
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-32939
2024-08-22 07:15:03
github
github
Mattermost doesn't redact remote users' original email addresses
2024-08-22 09:30:32
CVSS3
3.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-32939