VYPR
← All advisories
Low severity3.1NVD Advisory· Published Sep 26, 2024· Updated Jun 17, 2026

CVE-2024-47145

CVE-2024-47145

Description

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Mattermost/Mattermost3 versions
    cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*range: >=9.5.0,<9.5.9
    • (no CPE)range: <=9.5.8
    • (no CPE)range: 9.5.0
  • osv-coords
    pkg:bitnami/mattermost
    Range: >= 9.5.0, < 9.5.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.