VULNERABILITY INTELLIGENCE

CVE-2024-23488

CVSS score3.1 LOW
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-02-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Mattermost fails to properly restrict the access of files attached to posts in an archived channel, resulting in members being able to access files of archived channels even if the “Allow users to view archived channels” option is disabled.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references