← CVE Intelligence

CVE-2024-1949

Mattermost / Mattermost PUBLISHED

Description (CNA)

A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized access to individual posts' contents via carefully timed post creation while another user deletes posts.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 8.1.0 through 8.1.8; affected 9.4.0 through 9.4.1; unaffected 9.5; unaffected 9.4.2; unaffected 8.1.9

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.