• caglararli@hotmail.com
  • 05386281520

CVE-2024-24776 | Mattermost up to 8.1.7/9.4.0 API member_count access control

Çağlar Arlı      -    82 Views

CVE-2024-24776 | Mattermost up to 8.1.7/9.4.0 API member_count access control

A vulnerability was found in Mattermost up to 8.1.7/9.4.0. It has been classified as problematic. This affects an unknown part of the file /api/v4/channels/stats/member_count of the component API. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2024-24776. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.