| Assigner | Mattermost |
| Reserved | 2024-07-01 |
| Published | 2024-07-03 |
| Updated | 2024-07-03 |
Description
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.
| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N |
Problem types
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Product status
9.8.0
9.5.0
9.9.0
9.8.1
9.5.6
Credits
Juho Forsén
References
https://mattermost.com/security-updates
