Lucene search
+L

7 matches found

OSV
OSV
•added 2024/03/06 10:55 a.m.•91 views

BIT-MATTERMOST-2024-24776

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

4.3CVSS4AI score0.00314EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/09 3:15 p.m.•41 views

CVE-2024-24776

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

4.3CVSS4AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/09 2:50 p.m.•57 views

CVE-2024-24776 Incorrect Authorization leads to Channel Member Count Leak

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

3.1CVSS4.8AI score0.00314EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/09 2:50 p.m.•17 views

CVE-2024-24776 Incorrect Authorization leads to Channel Member Count Leak

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

3.1CVSS6.7AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/09 2:50 p.m.•266 views

CVE-2024-24776

Mattermost vulnerability CVE-2024-24776: The API POST /api/v4/channels/stats/member_count fails to enforce required permissions, leaking channel member counts to users without permissions. Documents confirm affected product (Mattermost) and the underlying issue is a permissions check gap in the c...

4.3CVSS4.5AI score0.00314EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/09 12:00 a.m.•14 views

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to check required permissions in the POST /api/v4/channels/stats/membercount API, leading to information disclosure...

4.3CVSS6.5AI score0.00314EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/06/24 12:00 a.m.•15 views

RTMPDump librtmp Remote Code Execution Vulnerability

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. RTMPDump version 2.4 has a security vulnerability in the 'AMF3CDAddProp' function in the amf.c file in librtmp...

9.8CVSS7.5AI score0.05923EPSS
SaveExploits1References1
Rows per page
Query Builder