Vulnerabilities > Mattermost > Mattermost Server > 9.9.1

DATE CVE VULNERABILITY TITLE RISK
2024-09-26 CVE-2024-42406 Unspecified vulnerability in Mattermost Server
Mattermost versions 9.11.x <= 9.11.0, 9.10.x <= 9.10.1, 9.9.x <= 9.9.2 and 9.5.x <= 9.5.8 fail to properly authorize requests when viewing archived channels is disabled, which allows an attacker to retrieve post and file information about archived channels.
network
low complexity
mattermost
5.4
2024-08-22 CVE-2024-42497 Unspecified vulnerability in Mattermost Server
Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams.
network
low complexity
mattermost
4.9
2024-08-22 CVE-2024-43780 Unspecified vulnerability in Mattermost Server
Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.0, 9.8.x <= 9.8.2 fail to enforce permissions which allows a guest user with read access to upload files to a channel.
network
low complexity
mattermost
4.3