Lucene search

MattermostVULNRICHMENT:CVE-2024-40886

HistoryAug 22, 2024 - 6:32 a.m.

CVE-2024-40886 One-click Client-Side Path Traversal Leading to CSRF in User Management admin page

2024-08-2206:32:11

CWE-352

Mattermost

github.com

cve-2024-40886

mattermost versions

sanitize user inputs

frontend

redirection

path traversal

csrf

system console

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

24.8%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to sanitize user inputs in the frontend that are used for redirection which allows for a one-click client-side path traversal that is leading to CSRF in User Management page of the system console.

References

mattermost.com/security-updates