CVE-2024-32045

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1, 8.1.x <= 8.1.12 fail to enforce proper access controls for channel and team membership when linking a playbook run to a channel which allows members to link their runs to private channels they were not members of.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-284 CWE-639

Affected software

No affected versions have been published.

Timeline

Published: May 26, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-320464.3Mattermost versions 9.6.x <= 9.6.0, 9.5.x <= 9.5.2, 9.4.x <= 9.4.4 and 8.1.x <= 8.1.11 fail to remove detailed error messages in API request CVE-2024-320479.8Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gai CVE-2024-320486.5Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Model Server software before version 2024.0 may allow an unauthentica CVE-2024-320497.4BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials. Not CVE-2024-320516.5Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network CVE-2024-320539.8Hard-coded credentials are used by the CyberPower PowerPanel platform to authenticate to the database, other services, and the cloud. T CVE-2024-320557.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-320567.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out of bounds write past CVE-2024-320577.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabil CVE-2024-320587.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application is vulnerable to memory corruption w CVE-2024-320597.8A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past CVE-2024-32064.3The Different Menu in Different Pages – Control Menu Visibility (All in One) plugin for WordPress is vulnerable to unauthorized access due t