Non évaluée
Users maintain access to active call after being removed from a channel
CVE-2024-21848
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com