Lucene search
GoogleOSV:GO-2024-3022HistoryAug 06, 2024 - 10:40 p.m.
Mattermost allows remote actor to set arbitrary RemoteId values for synced users in github.com/mattermost/mattermost-server
2024-08-0622:40:50
Google
osv.dev
3
mattermost
remote actor
remoteid
synced users
mattermost-server
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
AI Score
7.4
Confidence
Low
EPSS
0
Percentile
14.7%
Mattermost allows remote actor to set arbitrary RemoteId values for synced users in github.com/mattermost/mattermost-server
Related
osv
osv
BIT-mattermost-2024-41926
2024-09-05 19:13:59
CVE-2024-41926
2024-08-01 15:15:13
vulnrichment
vulnrichment
github
github
veracode
veracode
Improper Access Control
2024-08-12 10:12:40
cvelist
cvelist
nvd
nvd
CVE-2024-41926
2024-08-01 15:15:13
cve
cve
CVE-2024-41926
2024-08-01 15:15:13
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
AI Score
7.4
Confidence
Low
EPSS
0
Percentile
14.7%
Related for OSV:GO-2024-3022