VULNERABILITY INTELLIGENCE

CVE-2024-10241

CVSS score4.3 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2024-10-29

Last modified2026-06-17

Description

Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled which allows a user to get private channel names by using cmd+K/ctrl+K.