Unrated

RemoteClusterFrame payloads are audit logged in full

CVE-2024-39353 First seen on SecPulse Jul 3, 2024

Original description The description as published by the source.

Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web mattermost.com

Key facts

Severity: Unrated
Published: Jul 3, 2024
First seen on SecPulse: Jul 3, 2024
CWE: CWE-200

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04