low3.8
CVE-2024-36287
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
Impact
Mattermost Desktop App versions <=5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | mattermost-desktop | < 5.8.0 | 5.8.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Desktop | through 5.7.0 |