MEDIUM6.5
GO-2024-2798
Mattermost fails to limit the number of active sessions in github.com/mattermost/mattermost-server
Quick fix
GO-2024-2798 — github.com/mattermost/mattermost-server: upgrade to the fixed version with the command below.
go get github.com/mattermost/mattermost-server@v8.1.12+incompatibleDetails
Mattermost fails to limit the number of active sessions in github.com/mattermost/mattermost-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/mattermost/mattermost-server
Introduced in:
8.1.0+incompatibleFixed in: 8.1.12+incompatibleFix
go get github.com/mattermost/mattermost-server@v8.1.12+incompatibleReferences
- https://github.com/advisories/GHSA-wj37-mpq9-xrcm[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-4183[ADVISORY]
- https://github.com/mattermost/mattermost/commit/86920d641760552c5aafa5e1d14c93bd30039bc4[WEB]
- https://github.com/mattermost/mattermost/commit/9d81eee979aee93374bff8ba6714d805e12ffb03[WEB]
- https://github.com/mattermost/mattermost/commit/b45c3dac4c160992a1ce757ade968e8f5ec506c1[WEB]
- https://github.com/mattermost/mattermost/commit/bc699e6789cf3ba1544235087897699aaa639e7d[WEB]
- https://mattermost.com/security-updates[WEB]