← Database

CVE-2024-43780

MEDIUM CVSS: 4.3 Published: 2024-08-22 Modified: 2026-06-17

Description

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.0, 9.8.x <= 9.8.2 fail to enforce permissions which allows a guest user with read access to upload files to a channel.

Affected Platforms

Mattermost Mattermost Server

Weakness Type

CWE-284, NVD-CWE-noinfo

References