Mattermost versions 9.6.0, 9.5.x before 9.5.3, 9.4.x before 9.4.5, and 8.1.x before 8.1.12 fail to handle JSON parsing errors in custom status values, which allows an authenticated attacker to crash other users' web clients via a malformed custom status.
References
| Link | Resource |
|---|---|
| https://mattermost.com/security-updates | Vendor Advisory |
| https://mattermost.com/security-updates | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 May 2025, 13:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mattermost mattermost Server
Mattermost |
|
| CWE | CWE-754 | |
| References | () https://mattermost.com/security-updates - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
| CPE | cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:* |
26 Apr 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-26 09:15
Updated : 2025-05-12 13:41
NVD link : CVE-2024-4182
Mitre link : CVE-2024-4182
JSON object : View
Products Affected
mattermost
- mattermost_server
CWE
CWE-754
Improper Check for Unusual or Exceptional Conditions