CVEvulnerability

CVE-2024-50052

4.3 MEDIUM Published 2024-10-29 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-10-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-862

Description

Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to check that the origin of the message in an integration action matches with the original post metadata which allows an authenticated user to delete an arbitrary post.

Affected configurations

• mattermost mattermost server (>= 9.5.0 < 9.5.10) • mattermost mattermost server (>= 9.10.0 < 9.10.3) • mattermost mattermost server (>= 9.11.0 < 9.11.2)

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References