GitHub Advisoryadvisory · npm

GHSA-5777-rcjj-9p22 Mattermost Desktop App fails to safeguard screen capture functionality

MEDIUM Published 2024-09-16 Modified 2024-11-18 Official page ↗
Aliases
CVE-2024-39772
Ecosystem
npm
Packages
mattermost-desktop
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-284
Reviewed
2024-09-16

Affected packages

• npm mattermost-desktop: < 5.9.0 → fixed in 5.9.0

Description

Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.

Related

Alias · CVE (1)

  • CVE-2024-39772 Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture… vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References