CVE-2024-39613
RCE in desktop app in Windows by local attacker
概要
RCE in desktop app in Windows by local attacker
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com