VULNERABILITY INTELLIGENCE

CVE-2024-47145

CVSS score3.1 LOW
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-09-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.

Weakness classification

  • responsibledisclosure@mattermost.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references