Medium severity6.1NVD Advisory· Published Mar 15, 2024· Updated Jun 17, 2026
CVE-2024-2445
CVE-2024-2445
Description
Mattermost Jira plugin versions shipped with Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to escape user-controlled outputs when generating HTML pages, which allows an attacker to perform reflected cross-site scripting attacks against the users of the Mattermost server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <8.1.10, <9.2.6, <9.3.2, <9.4.3
9.4.0+ 1 more
- (no CPE)range: 9.4.0
- cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: >=8.1.0,<8.1.10
Patches
Vulnerability mechanics
References
1- mattermost.com/security-updatesnvdVendor Advisory
News mentions
0No linked articles in our index yet.