CVE-2024-40886

published 2024-08-22

CVE-2024-40886: Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to sanitize user inputs in the frontend that are used for redirection…

Priority P3 44 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to sanitize user inputs in the frontend that are used for redirection which allows for a one-click client-side path traversal that is leading to CSRF in User Management page of the system console.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
github.com	mattermost_mattermost-server	>= 9.10.0+incompatible < 9.10.1+incompatible	9.10.1+incompatible
github.com	mattermost_mattermost-server	>= 9.5.0+incompatible < 9.5.8+incompatible	9.5.8+incompatible
github.com	mattermost_mattermost-server	>= 9.8.0+incompatible < 9.8.3+incompatible	9.8.3+incompatible
github.com	mattermost_mattermost-server	>= 9.9.0+incompatible < 9.9.2+incompatible	9.9.2+incompatible
github.com	mattermost_mattermost_server_v8	>= 9.10.0 < 9.10.1	9.10.1
github.com	mattermost_mattermost_server_v8	>= 9.5.0 < 9.5.8	9.5.8
github.com	mattermost_mattermost_server_v8	>= 9.8.0 < 9.8.3	9.8.3
github.com	mattermost_mattermost_server_v8	>= 9.9.0 < 9.9.2	9.9.2
mattermost	mattermost	—	—
mattermost	mattermost	>= 9.10.0 < 9.10.1	9.10.1
mattermost	mattermost	>= 9.5.0 < 9.5.8	9.5.8
mattermost	mattermost	9.5.0 – 9.5.7	—
mattermost	mattermost	>= 9.8.0 < 9.8.3	9.8.3
mattermost	mattermost	9.8.0 – 9.8.2	—
mattermost	mattermost	>= 9.9.0 < 9.9.2	9.9.2
mattermost	mattermost	9.9.0 – 9.9.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-352