LOW3.7

GHSA-5777-rcjj-9p22

Mattermost Desktop App fails to safeguard screen capture functionality

Quick fix

GHSA-5777-rcjj-9p22 — mattermost-desktop: upgrade to the fixed version with the command below.

npm install mattermost-desktop@5.9.0

Details

Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/mattermost-desktop

Introduced in: 0Fixed in: 5.9.0

Fixnpm install mattermost-desktop@5.9.0

References

https://nvd.nist.gov/vuln/detail/CVE-2024-39772[ADVISORY]
https://github.com/mattermost/desktop[PACKAGE]
https://mattermost.com/security-updates[WEB]