Unrated severityNVD Advisory· Published Jul 3, 2024· Updated Aug 2, 2024
RemoteClusterFrame payloads are audit logged in full
CVE-2024-39353
Description
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.
Affected products
1- Range: 9.8.0
Patches
101723a784c5eVulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
1News mentions
0No linked articles in our index yet.