GitHub Advisoryadvisory · npm

GHSA-xgq9-7gw6-jr5r Mattermost Desktop App fails to sufficiently configure Electron Fuses

LOW Published 2024-09-16 Modified 2024-09-16 Official page ↗
Aliases
CVE-2024-45835
Ecosystem
npm
Packages
mattermost-desktop
Severity
Low
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-693
Reviewed
2024-09-16

Affected packages

• npm mattermost-desktop: < 5.9.0 → fixed in 5.9.0

Description

Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access.

Related

Alias · CVE (1)

  • CVE-2024-45835 Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies… vulnerability

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References