Unrated severityNVD Advisory· Published Sep 26, 2024· Updated Sep 26, 2024

Unauthorized access on archived channels via file links

CVE-2024-47145

Description

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.

Affected products

Mattermost/Mattermostv5
Range: 9.5.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

mattermost.com/security-updatesmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000