medium4.3
CVE-2024-43813
Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticated user, including guests, to mark any …
Impact
Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticated user, including guests, to mark any channel inside any team as read for any user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost | from 9.5.0 before 9.5.8 from 9.10.0 before 9.10.1 |