CVE-2024-41162
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
Mattermost allows a remote actor to make an arbitrary local channel read-only in github.com/mattermost/mattermost-server
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Go | github.com/mattermost/mattermost/server/v8 | >=9.5.0,<9.5.7 | 9.5.7 |
| Go | github.com/mattermost/mattermost/server/v8 | >=9.7.0,<9.7.6 | 9.7.6 |
| Go | github.com/mattermost/mattermost/server/v8 | >=9.8.0,<9.8.2 | 9.8.2 |
| Go | github.com/mattermost/mattermost/server/v8 | >=9.9.0,<9.9.1 | 9.9.1 |
| Go | github.com/mattermost/mattermost/server/v8 | <8.0.0-20240628125750-70b218839fa7 | 8.0.0-20240628125750-70b218839fa7 |
| Go | github.com/mattermost/mattermost | <5.3.2-0.20240628125750-70b218839fa7 | 5.3.2-0.20240628125750-70b218839fa7 |
| Go | github.com/mattermost/mattermost-server | >=9.9.0+incompatible,<9.9.1+incompatible | 9.5.7+incompatible |
| Go | github.com/mattermost/mattermost-server/v5 | | |
| Go | github.com/mattermost/mattermost-server/v6 | | |
| Go | github.com/mattermost/mattermost/server/v8 | | |
References
Verify integrity in audit chain (admin only). AS-IS.