CVE-2024-39837
published 2024-08-01CVE-2024-39837: Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly restrict channel creation which allows a malicious remote to create arbitrary channels…
medium5.4CVSS 3.1
AVNACLPRLUINSUCLILAN
Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly restrict channel creation which allows a malicious remote to create arbitrary channels, when shared channels were enabled.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | mattermost_mattermost-server | >= 9.5.0 < 9.5.7 | 9.5.7 |
| github.com | mattermost_mattermost-server | >= 9.5.0+incompatible < 9.5.7+incompatible | 9.5.7+incompatible |
| github.com | mattermost_mattermost-server | >= 9.9.0 < 9.9.1 | 9.9.1 |
| github.com | mattermost_mattermost-server | >= 9.9.0+incompatible < 9.9.1+incompatible | 9.9.1+incompatible |
| github.com | mattermost_mattermost-server_v5 | >= 0 < 5.3.2-0.20240626164322-c758cecaf30c | 5.3.2-0.20240626164322-c758cecaf30c |
| github.com | mattermost_mattermost-server_v6 | >= 0 < 6.0.0-20240626164322-c758cecaf30c | 6.0.0-20240626164322-c758cecaf30c |
| github.com | mattermost_mattermost_server_v8 | >= 0 < 8.0.0-20240626164322-c758cecaf30c | 8.0.0-20240626164322-c758cecaf30c |
| github.com | mattermost_mattermost_server_v8 | >= 9.5.0 < 9.5.7 | 9.5.7 |
| github.com | mattermost_mattermost_server_v8 | >= 9.9.0 < 9.9.1 | 9.9.1 |
| mattermost | mattermost | — | — |
| mattermost | mattermost | 9.5.0 – 9.5.6 | — |
| mattermost | mattermost_server | — | — |
| mattermost | mattermost_server | >= 9.5.0 < 9.5.7 | 9.5.7 |