VULNERABILITY INTELLIGENCE

CVE-2024-39837

CVSS score5.4 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2024-08-01

Last modified2026-06-17

Description

Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly restrict channel creation which allows a malicious remote to create arbitrary channels, when shared channels were enabled.