Go/github.com/mattermost/mattermost-server CVE-2024-4182: medium 4.3, EPSS 0.55%

Mattermost crashes web clients via a malformed custom status

Action: Upgrade github.com/mattermost/mattermost-server to 8.1.12 or later.

go get github.com/mattermost/mattermost-server@v8.1.12

go get github.com/mattermost/mattermost-server@v9.4.5

go get github.com/mattermost/mattermost-server@v9.5.3

go get github.com/mattermost/mattermost-server@v9.6.1

Affected

Fixed versions

Sources

• osv: GHSA-8f99-g2pj-x8w3
• https://nvd.nist.gov/vuln/detail/CVE-2024-4182
• https://github.com/mattermost/mattermost/commit/41333a0babf565453d89287549bec1e546e75ce7
• https://github.com/mattermost/mattermost/commit/6cbab0f7ece104681f73dd12c75d9f22d567125e
• https://github.com/mattermost/mattermost/commit/a99dadd80c57d376185ca06f8f70919a6f135bc6
• https://github.com/mattermost/mattermost/commit/f84f8ed65f6a5faba974426424b684635455a527
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2024-4182 · published 2024-04-26T09:30:34Z · modified 2024-06-05T16:43:16.600027Z · JSON