VULNERABILITY INTELLIGENCE

CVE-2024-1949

CVSS score2.6 LOW
EPSS probability0.27%
CISA KEVNot currently listed
Published2024-02-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized access to individual posts' contents via carefully timed post creation while another user deletes posts.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-200
  • nvd@nist.gov: CWE-362

Primary references