CVE-2024-47401

published 2024-10-29

CVE-2024-47401: Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1 and 9.5.x <= 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1 and 9.5.x <= 9.5.9 fail to prevent detailed error messages from being displayed in Playbooks which allows an attacker to generate a large response and cause an amplified GraphQL response which in turn could cause the application to crash by sending a specially crafted request to Playbooks.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
github.com	mattermost_mattermost_server_v8	>= 0 < 8.0.0-20240926115259-20ed58906adc	8.0.0-20240926115259-20ed58906adc
mattermost	mattermost	9.10.0 – 9.10.2	—
mattermost	mattermost	9.11.0 – 9.11.1	—
mattermost	mattermost	9.5.0 – 9.5.9	—
mattermost	mattermost_server	>= 9.10.0 < 9.10.3	9.10.3
mattermost	mattermost_server	>= 9.11.0 < 9.11.2	9.11.2
mattermost	mattermost_server	>= 9.5.0 < 9.5.10	9.5.10

CWE-770