~ / search / GHSA-xp9j-8p68-9q93

GHSA-xp9j-8p68-9q93

Mattermost Server Improper Access Control

Source: GitHub Advisory Database (reviewed) Low CVE-2024-21848

Packages

EcosystemPackageAffectedFixed in
Go github.com/mattermost/mattermost/server/v8 < 8.1.11 8.1.11

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel

References

External links from the advisory. They lead to third-party sites.