CVE-2024-29977

Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly validate synced reactions, when shared channels are enabled, which allows a malicious remote to create arbitrary reactions on arbitrary posts

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://mattermost.com/security-updates	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mattermost:mattermost::::::::
	cpe:2.3:a:mattermost:mattermost:9.9.0:::::::*

History

23 Aug 2024, 14:52

Type	Values Removed	Values Added
References	~~() https://mattermost.com/security-updates -~~	() https://mattermost.com/security-updates - Vendor Advisory
CPE		cpe:2.3:a:mattermost:mattermost:::::::: cpe:2.3:a:mattermost:mattermost:9.9.0:::::::*
CVSS	v2 : ~~unknown~~ v3 : ~~2.7~~	v2 : unknown v3 : 4.3
First Time		Mattermost mattermost Mattermost
CWE		NVD-CWE-noinfo
Summary		(es) Las versiones 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 de Mattermost no validan correctamente las reacciones sincronizadas cuando los canales compartidos están habilitados, lo que permite que un control remoto malicioso cree reacciones arbitrarias en publicaciones arbitrarias.

01 Aug 2024, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-08-01 15:15

Updated : 2024-08-23 14:52

NVD link : CVE-2024-29977

Mitre link : CVE-2024-29977

CVE.ORG link : CVE-2024-29977

JSON object : View

Products Affected

mattermost

mattermost

CWE

NVD-CWE-noinfo CWE-284

Improper Access Control

{"id": "CVE-2024-29977", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "responsibledisclosure@mattermost.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "published": "2024-08-01T15:15:11.290", "references": [{"url": "https://mattermost.com/security-updates", "tags": ["Vendor Advisory"], "source": "responsibledisclosure@mattermost.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "responsibledisclosure@mattermost.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 fail to properly validate\u00a0synced reactions, when shared channels are enabled,\u00a0which allows a malicious remote to create arbitrary reactions on arbitrary posts"}, {"lang": "es", "value": " Las versiones 9.9.x <= 9.9.0, 9.5.x <= 9.5.6 de Mattermost no validan correctamente las reacciones sincronizadas cuando los canales compartidos est\u00e1n habilitados, lo que permite que un control remoto malicioso cree reacciones arbitrarias en publicaciones arbitrarias."}], "lastModified": "2024-08-23T14:52:19.923", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mattermost:mattermost:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0942D308-9462-4C2A-A9FE-838EB5842E02", "versionEndExcluding": "9.5.7", "versionStartIncluding": "9.5.0"}, {"criteria": "cpe:2.3:a:mattermost:mattermost:9.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA215755-4D08-4B4D-9736-DAF54D2F0B9C"}], "operator": "OR"}]}], "sourceIdentifier": "responsibledisclosure@mattermost.com"}