Go/github.com/mattermost/mattermost-server CVE-2024-32046: medium 4.3, EPSS 0.45%

Mattermost's detailed error messages reveal the full file path

Action: Upgrade github.com/mattermost/mattermost-server to 8.1.12 or later.

go get github.com/mattermost/mattermost-server@v8.1.12

go get github.com/mattermost/mattermost-server@v9.5.3

go get github.com/mattermost/mattermost-server@v9.6.1

go get github.com/mattermost/mattermost-server@v9.4.5

Affected

Fixed versions

Sources

• osv: GHSA-vx97-8q8q-qgq5
• https://nvd.nist.gov/vuln/detail/CVE-2024-32046
• https://github.com/mattermost/mattermost/commit/2a48b5b3428cae494452125401e4f72780543ac8
• https://github.com/mattermost/mattermost/commit/93738756ff79777c6e340c8de63a7b4b0f881d27
• https://github.com/mattermost/mattermost/commit/aa222c66b799c12e32eeb8eae6f555bf6140375b
• https://github.com/mattermost/mattermost/commit/c84c25b20c8b8726a2f126ae9370a72498096172
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2024-32046 · published 2024-04-26T09:30:34Z · modified 2024-06-05T16:43:18.884911Z · JSON