💣Exploit CVE-2024-42000 - Mattermost Authorization Bypassenticated Channel Access Vulnerability

[Maksim]

CVE ID : CVE-2024-42000
Published : Nov. 9, 2024, 6:15 p.m. | 43 minutes ago
Description : Mattermost versions 9.10.x api/v4/channels which allows a User or System Manager, with "Read Groups" permission but with no access for channels to retrieve details about private channels that they were not a member of by sending a request to /api/v4/channels.
Severity: 2.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.