Code Injection Vulnerability in Mattermost Desktop App
CVE-2016-11064

9.8CRITICAL

Key Information:

Vendor

Mattermost
Status
Mattermost Desktop
Vendor
CVE Published:
19 June 2020

What is CVE-2016-11064?

A vulnerability in older versions of the Mattermost Desktop App allows malicious users to execute arbitrary code through injection of specially crafted strings. This issue poses risks to the integrity and confidentiality of sensitive data, as it can lead to unauthorized actions within the application. Users are strongly encouraged to update to version 3.4.0 or later to mitigate this risk. For more details, refer to the official security updates page of Mattermost.

References

https://mattermost.com/security-updates/
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2016-11064 : Code Injection Vulnerability in Mattermost Desktop App