Mattermost's detailed error messages reveal the full file path in github.com/mattermost/mattermost-server
Mattermost's detailed error messages reveal the full file path in github.com/mattermost/mattermost-server
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32046US | medium4.3 | — | ||
Mattermost versions 9.6.x <= 9.6.0, 9.5.x <= 9.5.2, 9.4.x <= 9.4.4 and 8.1.x <= 8.1.11 fail to remove detailed error messages in API requests even if the developer mode is off whic… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-vx97-8q8q-qgq5ADVISORY
- https://github.com/mattermost/mattermost/commit/2a48b5b3428cae494452125401e4f72780543ac8WEB
- https://github.com/mattermost/mattermost/commit/93738756ff79777c6e340c8de63a7b4b0f881d27WEB
- https://github.com/mattermost/mattermost/commit/aa222c66b799c12e32eeb8eae6f555bf6140375bWEB
- https://github.com/mattermost/mattermost/commit/c84c25b20c8b8726a2f126ae9370a72498096172WEB
- https://mattermost.com/security-updatesWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-32046ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan