CVE-2024-47145
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Sep 26, 2024
CWE ID 284
Summary
CVE-2024-47145 is a vulnerability affecting Mattermost versions 9.5.x up to and including 9.5.8. This issue allows unauthorized access to archived channels, enabling attackers to view posts and files of archived channels even when viewing archived channels is disabled. The flaw arises due to a failure in the authorization process for archived channels, potentially putting sensitive information at risk. Organizations using these affected versions are urged to apply patches or updates as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mattermost Server
Affected Vendors
- Mattermost, Inc.