Kurz gesagt
- CVE-2024-4195 ist eine Schwachstelle (NIEDRIG (CVSS 2.7)) in github.com/mattermost/mattermost-server, mattermost server (mattermost).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.50%, höher als bei 43.0% aller Schwachstellen.
- Abhilfe: auf 8.1.12, 8.1.12+incompatible, 9.5.3, 9.5.3+incompatible oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| github.com/mattermost/mattermost-server Go | ≥ 8.1.0, < 8.1.12≥ 8.1.0+incompatible, < 8.1.12+incompatible≥ 9.5.0, < 9.5.3≥ 9.5.0+incompatible, < 9.5.3+incompatible
| 8.1.128.1.12+incompatible9.5.39.5.3+incompatible
|
| mattermost server | ≥ 8.1.0, < 8.1.12≥ 9.5.0, < 9.5.3
| 8.1.129.5.3
|
Description
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.
NVD description
Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests.
Weitere Schwachstellen in github.com/mattermost/mattermost-server
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free