CVE-2024-45835

Insufficient Electron Fuses Configuration PUBLISHED

Description (CNA)

Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access.

Affected (CNA)

Vendor / product	Versions
Mattermost / Mattermost	affected 0 through 5.8.0; unaffected 5.9.0

CWE

CWE-693

References

https://mattermost.com/security-updates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.