Mattermost fails to limit the number of active sessions in github.com/mattermost/mattermost-server
Mattermost fails to limit the number of active sessions in github.com/mattermost/mattermost-server
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-4183US | medium6.5 | — | ||
Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attac… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-wj37-mpq9-xrcmADVISORY
- https://github.com/mattermost/mattermost/commit/86920d641760552c5aafa5e1d14c93bd30039bc4WEB
- https://github.com/mattermost/mattermost/commit/9d81eee979aee93374bff8ba6714d805e12ffb03WEB
- https://github.com/mattermost/mattermost/commit/b45c3dac4c160992a1ce757ade968e8f5ec506c1WEB
- https://github.com/mattermost/mattermost/commit/bc699e6789cf3ba1544235087897699aaa639e7dWEB
- https://mattermost.com/security-updatesWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-4183ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan