CVE-2024-47145

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Sep 26, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-471466.5Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically aCVE-2024-471485.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiCVE-2024-471495.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiCVE-2024-47156.1A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects aCVE-2024-471505.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471517.8Some Honor products are affected by file writing vulnerability, successful exploitation could cause code executionCVE-2024-471535.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471545.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471555.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471565.5Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.CVE-2024-471575.5Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiCVE-2024-471585.4N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed o
CVE-2024-47145: Medium severity, CVSS 4.3 | Vulnix