GHSA-xmvv-w44w-j8wx
Mattermost Desktop App allows the bypass of Transparency, Consent, and Control (TCC) via code injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | mattermost-desktop | < 5.11.0 | 5.11.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Mattermost Desktop App versions <=5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control (TCC) via code injection.
References
External links from the advisory. They lead to third-party sites.