CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-47145

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.2%

CVSS Severity

CVSS v3 Score 3.1

References

https://mattermost.com/security-updates

Products affected by CVE-2024-47145

Mattermost » Mattermost Server » Version: 9.5.0

cpe:2.3:a:mattermost:mattermost_server:9.5.0
Mattermost » Mattermost Server » Version: 9.5.1

cpe:2.3:a:mattermost:mattermost_server:9.5.1
Mattermost » Mattermost Server » Version: 9.5.2

cpe:2.3:a:mattermost:mattermost_server:9.5.2
Mattermost » Mattermost Server » Version: 9.5.3

cpe:2.3:a:mattermost:mattermost_server:9.5.3
Mattermost » Mattermost Server » Version: 9.5.4

cpe:2.3:a:mattermost:mattermost_server:9.5.4
Mattermost » Mattermost Server » Version: 9.5.5

cpe:2.3:a:mattermost:mattermost_server:9.5.5
Mattermost » Mattermost Server » Version: 9.5.6

cpe:2.3:a:mattermost:mattermost_server:9.5.6
Mattermost » Mattermost Server » Version: 9.5.7

cpe:2.3:a:mattermost:mattermost_server:9.5.7
Mattermost » Mattermost Server » Version: 9.5.8

cpe:2.3:a:mattermost:mattermost_server:9.5.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-47145

Products

Pricing

Contact Us