CVE-2024-1952

Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can control the ephemeral post update to access individual posts' contents in channels they are not a member of...

CVE-2024-1952

creationtimestamp| type| source ---|---|--- 2024-02-29 12:31:59+00:00| seen| https://t.me/ctinow/196567 2024-02-29 12:32:13+00:00| seen| https://t.me/ctinow/196575...

CVE-2024-1952

Mattermost 8.1.x prior to 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, enabling an authenticated attacker who can control the ephemeral post update to access contents of individual posts in channels they are not a member of. Affected product/ver...