Lucene search
K

5 matches found

Veracode
Veracode
added 2024/08/09 11:26 a.m.13 views

Incorrect Error Handling

github.com/mattermost/mattermost-server is vulnerable to Incorrect Error Handling. The vulnerability is caused due to a failure to properly safeguard an error handling. This allows an attacker to permanently delete local data by abusing dangerous error handling, when share channels were enabled...

8.7CVSS6.5AI score0.00262EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/08/01 3:32 p.m.6 views

GHSA-762M-4CX6-6MF4 Mattermost allows a remote actor to permanently delete local data by abusing dangerous error handling

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled...

6.8CVSS7.3AI score0.00262EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/08/01 3:32 p.m.13 views

Mattermost allows a remote actor to permanently delete local data by abusing dangerous error handling

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled...

8.7CVSS6.8AI score0.00262EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/08/01 3:15 p.m.17 views

CVE-2024-39832

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled...

8.7CVSS0.00262EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/08/01 2:5 p.m.13 views

CVE-2024-39832 Permanently local data deletion by malicious remote

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled...

6.8CVSS6.8AI score0.00262EPSS
Exploits0References1
Rows per page
Query Builder