Mattermost Server 9.5.x < 9.5.9 / 9.9.x < 9.9.2 / 9.10.x < 9.10.2 / 9.11.x < 9.11.1 (MMSA-2024-00351)

The version of Mattermost Server installed on the remote host is prior to 9.5.9, 9.9.2, 9.10.2, or 9.11.1. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00351 advisory. - Mattermost versions 9.11.x = 9.11.0, 9.10.x = 9.10.1, 9.9.x = 9.9.2 and 9.5.x = 9.5.8 fail to...

CVE-2024-42406

Mattermost versions 9.11.x = 9.11.0, 9.10.x = 9.10.1, 9.9.x = 9.9.2 and 9.5.x = 9.5.8 fail to properly authorize requests when viewing archived channels is disabled, which allows an attacker to retrieve post and file information about archived channels. Examples are flagged or unread posts as wel...

CVE-2024-42406 Unauthorized access on archived channels

Mattermost versions 9.11.x = 9.11.0, 9.10.x = 9.10.1, 9.9.x = 9.9.2 and 9.5.x = 9.5.8 fail to properly authorize requests when viewing archived channels is disabled, which allows an attacker to retrieve post and file information about archived channels. Examples are flagged or unread posts as wel...