Username Manipulation Vulnerability in Mattermost by Mattermost, Inc.
CVE-2024-39839

4.3MEDIUM

Key Information:

Vendor

Mattermost
Status
Mattermost Server
Vendor
CVE Published:
1 August 2024

What is CVE-2024-39839?

Certain versions of Mattermost have a vulnerability that allows users to alter their remote username when shared channels are enabled. This breach permits a user to configure their remote username to any arbitrary value, which is subsequently synchronized to the local server unless the user has been previously synced. This could potentially lead to identity misrepresentation and security concerns within collaborative environments.

References

https://mattermost.com/security-updates

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.