Unrated severityNVD Advisory· Published Sep 26, 2024· Updated Sep 26, 2024
Unauthorized access on archived channels via file links
CVE-2024-47145
Description
Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=9.5.8+ 1 more
- (no CPE)range: <=9.5.8
- (no CPE)range: 9.5.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.