Lucene search

PRIOn knowledge basePRION:CVE-2024-24774

HistoryFeb 09, 2024 - 3:15 p.m.

Design/Logic Flaw

2024-02-0915:15:00

PRIOn knowledge base

www.prio-n.com

mattermost

jira

plugin

security flaw

subscriptions

webhooks

unauthorized access

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

JSON

Mattermost Jira Plugin handling subscriptions fails to check the security level of an incoming issue or limit it based on the user who created the subscription resulting in registered users on Jira being able to create webhooks that give them access to all Jira issues.

CPENameOperatorVersion
mattermost_serverle8.1.7

CPE	Name	Operator	Version
	mattermost_server	le	8.1.7

References

mattermost.com/security-updates