Lucene search
+L

9 matches found

osv_bit
osv_bit
•added 2024/03/06 10:55 a.m.•99 views

BIT-MATTERMOST-2024-24776

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

4.3CVSS4AI score0.00314EPSS
SaveExploits0References2
NVD
NVD
•added 2024/02/09 3:15 p.m.•48 views

CVE-2024-24776

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

4.3CVSS4AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/09 2:50 p.m.•274 views

CVE-2024-24776

Mattermost vulnerability CVE-2024-24776: The API POST /api/v4/channels/stats/member_count fails to enforce required permissions, leaking channel member counts to users without permissions. Documents confirm affected product (Mattermost) and the underlying issue is a permissions check gap in the c...

4.3CVSS4.5AI score0.00314EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/09 2:50 p.m.•17 views

CVE-2024-24776 Incorrect Authorization leads to Channel Member Count Leak

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

3.1CVSS6.7AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/09 2:50 p.m.•63 views

CVE-2024-24776 Incorrect Authorization leads to Channel Member Count Leak

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

3.1CVSS4.8AI score0.00314EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/09 12:00 a.m.•20 views

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to check required permissions in the POST /api/v4/channels/stats/membercount API, leading to information disclosure...

4.3CVSS6.5AI score0.00314EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•4 views

PT-2024-20554

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to v8.1.8 Description Mattermost fails to check the required permissions in the "POST /api/v4/channels/stats/member count" API endpoint, resulting in channel member counts being leaked to a user without permissions...

4.3CVSS5.6AI score0.00314EPSS
SaveExploits0References14
CNVD
CNVD
•added 2016/06/24 12:00 a.m.•20 views

RTMPDump librtmp Remote Code Execution Vulnerability

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. RTMPDump version 2.4 has a security vulnerability in the 'AMF3CDAddProp' function in the amf.c file in librtmp...

9.8CVSS7.5AI score0.05923EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2015/01/05 12:00 a.m.•5 views

PT-2015-4264

Name of the Vulnerable Software and Affected Versions Our Team Showcase our-team-enhanced plugin versions prior to 1.3 for WordPress Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct...

6.8CVSS0.01001EPSS
SaveExploits1References3
Rows per page
Query Builder