CVE-2024-24776
Incorrect Authorization leads to Channel Member Count Leak
Résumé
Incorrect Authorization leads to Channel Member Count Leak
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/member_count API resulting in channel member counts being leaked to a user without permissions.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com