Vulnerability Database
289,784
Total vulnerabilities in the database
CVE-2024-1952
Mattermost version 8.1.x before 8.1.9 fails to sanitize data associated with permalinks when a plugin updates an ephemeral post, allowing an authenticated attacker who can control the ephemeral post update to access individual posts' contents in channels they are not a member of.
| Software | From | Fixed in |
|---|---|---|
github.com/mattermost/mattermost/server/v8
|
9.0.0 | 9.4.0 |
| mattermost / mattermost_server | 8.1.0 | 8.1.9 |