Filtered by vendor Mattermost Subscriptions
Total 462 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-39777 1 Mattermost 1 Mattermost 2024-08-23 8.7 High
Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5 and 9.8.x <= 9.8.1 fail to disallow unsolicited invites to expose access to local channels, when shared channels are enabled, which allows a malicious remote to send an invite with the ID of an existing local channel, and that local channel will then become shared without the consent of the local admin.
CVE-2024-39832 1 Mattermost 1 Mattermost 2024-08-23 6.8 Medium
Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly safeguard an error handling which allows a malicious remote to permanently delete local data by abusing dangerous error handling, when share channels were enabled.