← Back

CVE-2024-39832

nvd nist
Published: Aug 1, 2024Modified: Aug 23, 2024

JSON object

Loading...
8.7
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
Exploitability: 2.3 / Impact: 5.8
Source: NVD

Description

Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled.

Affected (4)

Mattermost
1 product
Mattermost
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Mattermost
Mattermost
From 9.5.0 to 9.5.7
Mattermost
From 9.7.0 to 9.7.6
Mattermost
From 9.8.0 to 9.8.2
Mattermost
Version 9.9.0

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

Source: responsibledisclosure@mattermost.com
Vendor Advisory

Timeline

No history available yet.