CVE-2024-39613
RCE in desktop app in Windows by local attacker
Résumé
RCE in desktop app in Windows by local attacker
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web mattermost.com