EUVD-2024-39386

Malicious code in bioql PyPI...

Unauthorized Access

Mattermost is vulnerable to unauthorized access. The vulnerability is due to improper authorization, which allows users or system managers with "Read Groups" permission to retrieve details about private channels they are not members of by sending requests to /api/v4/channels...

Mattermost Authorization Issues Vulnerability (CNVD-2024-45314)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from improper authorization of /api/v4/channels requests, which can be exploited by an attacker with Read Groups privileges, but ...

PT-2024-29684 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.9 Mattermost versions 9.10.x through 9.10.2 Mattermost versions 9.11.x through 9.11.1 Mattermost versions 10.0.x through 10.0.0 Description: The issue allows a User or System Manager with "Read Groups"...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from improper authorization of /api/v4/channels requests, which can be exploited by an attacker with Read Groups privileges, but ...