Security Advisory

CVE-2024-10241

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-29 08:08:20
Last updated 2024-10-29 12:52:53
Assigner Mattermost
CVSS score 4.3
State PUBLISHED

Description

Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled which allows a user to get private channel names by using cmd+K/ctrl+K.