tocsin

CVE-2024-24776

5 advisories.

Go/github.com/mattermost/mattermost/server/v8 CVE-2024-24776: low 3.1, EPSS 0.31%

Mattermost fails to check the required permissions

Action: Upgrade github.com/mattermost/mattermost/server/v8 to 8.1.8 or later.

go get github.com/mattermost/mattermost/server/v8@v8.1.8
go get github.com/mattermost/mattermost/server/v8@v9.3.0

Affected

introducedfixedlast affected
08.1.8-
9.0.09.3.0-

Fixed versions

8.1.89.3.0

Sources

CVE-2024-24776 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2024-24776: unknown, EPSS 0.31%

Mattermost fails to check the required permissions in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 9.3.0+incompatible or later.

go get github.com/mattermost/mattermost-server@v9.3.0+incompatible

Affected

introducedfixedlast affected
9.0.0+incompatible9.3.0+incompatible-

Fixed versions

9.3.0+incompatible

Sources

CVE-2024-24776 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2024-24776: unknown, EPSS 0.31%

Mattermost fails to check the required permissions in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-24776 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v6 CVE-2024-24776: unknown, EPSS 0.31%

Mattermost fails to check the required permissions in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-24776 · published · modified · JSON

Go/github.com/mattermost/mattermost/server/v8 CVE-2024-24776: unknown, EPSS 0.31%

Mattermost fails to check the required permissions in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-24776 · published · modified · JSON