tocsin

Go/github.com/mattermost/mattermost-server CVE-2024-28949: unknown, EPSS 0.56%

Mattermost Server doesn't limit the number of user preferences in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.3.3+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.3.3+incompatible
go get github.com/mattermost/mattermost-server@v9.4.4+incompatible
go get github.com/mattermost/mattermost-server@v9.5.2+incompatible

Affected

introducedfixedlast affected
9.3.0+incompatible9.3.3+incompatible-
9.4.0+incompatible9.4.4+incompatible-
9.5.0+incompatible9.5.2+incompatible-

Fixed versions

9.3.3+incompatible9.4.4+incompatible9.5.2+incompatible

Sources

CVE-2024-28949 · published · modified · JSON