CVE-2024-24774

Go/github.com/mattermost/mattermost-plugin-jira CVE-2024-24774: low 3.4, EPSS 0.46%

Mattermost Jira Plugin does not properly check security levels

Action: Upgrade github.com/mattermost/mattermost-plugin-jira to 4.0.0-rc1 or later.

go get github.com/mattermost/mattermost-plugin-jira@v4.0.0-rc1

Affected

Fixed versions

Sources

• osv: GHSA-qr8f-cjw7-838m
• https://nvd.nist.gov/vuln/detail/CVE-2024-24774
• https://github.com/mattermost/mattermost-plugin-jira/commit/5f5e084d169bf6b82d5c46a7a7eb033e1a01c6de
• https://mattermost.com/security-updates

CVE-2024-24774 · published 2024-02-09T15:31:27Z · modified 2024-11-18T16:26:36Z · JSON

Go/github.com/mattermost/mattermost-plugin-jira CVE-2024-24774: unknown, EPSS 0.46%

Mattermost Jira Plugin does not properly check security levels in github.com/mattermost/mattermost-plugin-jira

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2540
• https://github.com/advisories/GHSA-qr8f-cjw7-838m
• https://nvd.nist.gov/vuln/detail/CVE-2024-24774
• https://github.com/mattermost/mattermost-plugin-jira/commit/5f5e084d169bf6b82d5c46a7a7eb033e1a01c6de
• https://mattermost.com/security-updates

CVE-2024-24774 · published 2024-06-28T15:28:53Z · modified 2024-07-09T19:33:56Z · JSON