Lucene search
K

7 matches found

OSV
OSV
added 2024/03/06 10:55 a.m.15 views

BIT-MATTERMOST-2024-24776

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

4.3CVSS4AI score0.00162EPSS
Exploits0References2
NVD
NVD
added 2024/02/09 3:15 p.m.13 views

CVE-2024-24776

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

4.3CVSS4AI score0.00162EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/09 2:50 p.m.17 views

CVE-2024-24776 Incorrect Authorization leads to Channel Member Count Leak

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

3.1CVSS4.8AI score0.00162EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/09 2:50 p.m.15 views

CVE-2024-24776 Incorrect Authorization leads to Channel Member Count Leak

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/membercount API resulting in channel member counts being leaked to a user without permissions...

3.1CVSS6.7AI score0.00162EPSS
Exploits0References1
CVE
CVE
added 2024/02/09 2:50 p.m.242 views

CVE-2024-24776

Mattermost vulnerability CVE-2024-24776: The API POST /api/v4/channels/stats/member_count fails to enforce required permissions, leaking channel member counts to users without permissions. Documents confirm affected product (Mattermost) and the underlying issue is a permissions check gap in the c...

4.3CVSS4.5AI score0.00162EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/09 12:0 a.m.4 views

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to check required permissions in the POST /api/v4/channels/stats/membercount API, leading to information disclosure...

4.3CVSS6.5AI score0.00162EPSS
Exploits0References2
CNVD
CNVD
added 2016/06/24 12:0 a.m.1 views

RTMPDump librtmp Remote Code Execution Vulnerability

RTMPDump is a toolkit for working with RTMP a network protocol used to transmit video and audio data over the Internet. librtmp is one of the libraries that supports the RTMP protocol. RTMPDump version 2.4 has a security vulnerability in the 'AMF3CDAddProp' function in the amf.c file in librtmp...

9.8CVSS7.5AI score0.01254EPSS
Exploits1References1
Rows per page
Query Builder