Security Advisory

CVE-2024-24776

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-02-09 14:50:45

Last updated 2024-08-01 23:28:12

Assigner Mattermost

CVSS score 3.1

State PUBLISHED

Description

Mattermost fails to check the required permissions in the POST /api/v4/channels/stats/member_count API resulting in channel member counts being leaked to a user without permissions.

← Browse all CVEs View on cve.org ↗