NetSight
medium4.6

CVE-2024-12247

Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updates across cluster nodes which allows a …

Impact

Mattermost versions 9.7.x <= 9.7.5, 9.8.x <= 9.8.2 and 9.9.x <= 9.9.2 fail to properly propagate permission scheme updates across cluster nodes which allows a user to keep old permissions, even if the permission scheme has been updated.

Affected products

VendorProductAffected versions
MattermostMattermost Server
from 9.7.0 before 9.7.6
from 9.8.0 before 9.8.3
from 9.9.0 before 9.9.3

Weakness classification

References