LOW3.1

GHSA-xp9j-8p68-9q93

Mattermost Server Improper Access Control

Quick fix

GHSA-xp9j-8p68-9q93 — github.com/mattermost/mattermost/server/v8: upgrade to the fixed version with the command below.

go get github.com/mattermost/mattermost/server/v8@v8.1.11

Details

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/mattermost/mattermost/server/v8

Introduced in: 0Fixed in: 8.1.11

Fixgo get github.com/mattermost/mattermost/server/v8@v8.1.11

References

https://nvd.nist.gov/vuln/detail/CVE-2024-21848[ADVISORY]
https://github.com/mattermost/mattermost[PACKAGE]
https://mattermost.com/security-updates[WEB]