tocsin

Go/github.com/mattermost/mattermost-server CVE-2024-8071: high 7.2, EPSS 0.34%

Mattermost doesn't restrict which roles can promote a user as system admin in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.5.8+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.5.8+incompatible
go get github.com/mattermost/mattermost-server@v9.8.3+incompatible
go get github.com/mattermost/mattermost-server@v9.9.2+incompatible
go get github.com/mattermost/mattermost-server@v9.10.1+incompatible

Affected

introducedfixedlast affected
9.5.0+incompatible9.5.8+incompatible-
9.8.0+incompatible9.8.3+incompatible-
9.9.0+incompatible9.9.2+incompatible-
9.10.0+incompatible9.10.1+incompatible-

Fixed versions

9.5.8+incompatible9.8.3+incompatible9.9.2+incompatible9.10.1+incompatible

Sources

CVE-2024-8071 · published · modified · JSON