tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2024-23493: medium 4.3, EPSS 0.39%

Mattermost leaks details of AD/LDAP groups of a teams

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 9.2.5 or later.

go get github.com/mattermost/mattermost/server/v8@v9.4.2
go get github.com/mattermost/mattermost/server/v8@v9.3.1
go get github.com/mattermost/mattermost/server/v8@v9.2.5

Affected

introducedfixedlast affected
9.4.09.4.2-
9.3.09.3.1-
9.2.09.2.5-

Fixed versions

9.4.29.3.19.2.5

Sources

CVE-2024-23493 · published · modified · JSON