tocsin

Go/github.com/mattermost/mattermost/server/v8 CVE-2024-41926: low 2.7, EPSS 0.18%

Mattermost allows remote actor to set arbitrary RemoteId values for synced users

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.0.0-20240604093018-5114c3b7cdb8 or later.

go get github.com/mattermost/mattermost/server/v8@v9.5.7
go get github.com/mattermost/mattermost/server/v8@v9.9.1
go get github.com/mattermost/mattermost/server/v8@v8.0.0-20240604093018-5114c3b7cdb8

Affected

introducedfixedlast affected
9.5.09.5.7-
9.9.09.9.1-
08.0.0-20240604093018-5114c3b7cdb8-

Fixed versions

9.5.79.9.18.0.0-20240604093018-5114c3b7cdb8

Sources

CVE-2024-41926 · published · modified · JSON