CVE-2024-41144
Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <= 9.7.5, 9.8.x <= 9.8.1 fail to properly validate synced posts, when shared channels are enabled,  which allows a malicious remote to create/update/delete arbitrary posts in arbitrary channels
- Affected products
- Mattermost
- Mattermost Mattermost Server
- < 9.5.7, 9.7.6, 9.8.2, 9.9.0
- Fix
- Available
- CVSS 3.1
- 7.1 HIGH
- EPSS
- 0.4% (29th percentile)
- Weakness
- CWE-284
- NVD status
- Analyzed
- Published
- 2024-08-01
Fix
Update Mattermost to versions 9.10.0, 9.9.1, 9.5.7, 9.7.6, 9.8.2 or higher.
CVE-2024-41144 at NVD
No indexed exploits for CVE-2024-41144 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-41144 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.