Go/github.com/mattermost/mattermost/server/v8 CVE-2024-28949: medium 4.3, EPSS 0.56%

Mattermost Server doesn't limit the number of user preferences

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.1.11 or later.

go get github.com/mattermost/mattermost/server/v8@v8.1.11

go get github.com/mattermost/mattermost/server/v8@v9.3.3

go get github.com/mattermost/mattermost/server/v8@v9.4.4

go get github.com/mattermost/mattermost/server/v8@v9.5.2

Affected

Fixed versions

Sources

• osv: GHSA-mcw6-3256-64gg
• https://nvd.nist.gov/vuln/detail/CVE-2024-28949
• https://github.com/mattermost/mattermost/commit/11a21f4da352a472a09de3b8e125514750a6619a
• https://github.com/mattermost/mattermost/commit/362b7d29d35c00fe80721d3d47442a4f3168eb2b
• https://github.com/mattermost/mattermost/commit/5632d6b4ff6d019a21bb8ddd037d4a931cd85ae2
• https://github.com/mattermost/mattermost/commit/88f9285173dc4cb35fa19a8b8604e098a567f704
• https://mattermost.com/security-updates
• https://pkg.go.dev/vuln/GO-2024-2695

CVE-2024-28949 · published 2024-04-05T09:30:39Z · modified 2024-12-13T15:51:20Z · JSON