Lucene search
PRIOn knowledge basePRION:CVE-2024-1942HistoryFeb 29, 2024 - 11:15 a.m.
Design/Logic Flaw
2024-02-2911:15:00
PRIOn knowledge base
www.prio-n.com
4
mattermost
metadata exposure
vulnerability
authenticated attacker
permalinks
Mattermost versions 8.1.x before 8.1.9, 9.2.x before 9.2.5, and 9.3.0 fail to sanitize the metadata on posts containing permalinks under specific conditions, which allows an authenticated attacker to access the contents of individual posts in channels they are not a member of.
References
Related
cve
cve
CVE-2024-1942
2024-02-29 11:15:07
osv
osv
Mattermost allows attackers access to posts in channels they are not a member of in github.com/mattermost/mattermost-server
2024-06-28 15:28:53
CGA-xvq7-x2jj-6hg4
2024-06-24 14:34:08
nvd
nvd
CVE-2024-1942
2024-02-29 11:15:07
veracode
veracode
Information Disclosure
2024-03-01 04:54:09
cvelist
cvelist
CVE-2024-1942
2024-02-29 10:41:38
github
github