Lucene search
+L

5 matches found

Veracode
Veracode
•added 2024/05/28 10:01 a.m.•29 views

Improper Access Control

Mattermost is vulnerable to Improper Access Control. The vulnerability is due to a failure to enforce proper access controls, allowing users to view arbitrary post contents via the /playbook slash command...

3.1CVSS6.8AI score0.00258EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/05/26 2:15 p.m.•35 views

CVE-2024-36241

Mattermost versions 9.5.x = 9.5.3, 9.6.x = 9.6.1 and 8.1.x = 8.1.12 fail to enforce proper access controls which allows user to view arbitrary post contents via the /playbook add slash command...

4.3CVSS4.2AI score0.00258EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/26 1:32 p.m.•78 views

CVE-2024-36241

Mattermost Server vulnerable versions: 8.1.x up to 8.1.12; 9.5.x up to 9.5.3; 9.6.x up to 9.6.1. Issue: improper access controls allow viewing arbitrary post contents via the /playbook add slash command. Root cause: failure to enforce access restrictions. Impact: exposure of post content to unaut...

4.3CVSS4.1AI score0.00258EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/05/26 1:32 p.m.•13 views

CVE-2024-36241 /playbook add slash command allows viewing arbitrary post contents

Mattermost versions 9.5.x = 9.5.3, 9.6.x = 9.6.1 and 8.1.x = 8.1.12 fail to enforce proper access controls which allows user to view arbitrary post contents via the /playbook add slash command...

3.1CVSS6AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/26 12:00 a.m.•2 views

CVE-2024-36241: Improper Access Control

Mattermost versions 9.5.x = 9.5.3, 9.6.x = 9.6.1 and 8.1.x = 8.1.12 fail to enforce proper access controls which allows user to view arbitrary post contents via the /playbook add slash command...

4.3CVSS5.8AI score0.00258EPSS
SaveExploits0References1
Rows per page
Query Builder