CVE-2024-47003

published 2024-09-26

CVE-2024-47003: Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a string, which allows an attacker to send a non-string value as the message of a permalink post and crash the frontend.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
github.com	mattermost_mattermost_server_v8	>= 0 < 8.0.0-20240806094731-69a8b3df0f9f	8.0.0-20240806094731-69a8b3df0f9f
mattermost	mattermost	—	—
mattermost	mattermost	9.5.0 – 9.5.8	—
mattermost	mattermost_server	—	—
mattermost	mattermost_server	>= 9.5.0 < 9.5.9	9.5.9

CWE-400