VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Dec 5, 2024· Updated Jun 17, 2026

CVE-2024-12247

CVE-2024-12247

Description

Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updates across cluster nodes which allows a user to keep old permissions, even if the permission scheme has been updated.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mattermost/Mattermost3 versions
    cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: >=9.7.0,<9.7.6
    • (no CPE)range: <=9.7.5, <=9.8.2, <=9.9.2
    • (no CPE)range: 9.7.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.