Authorization Flaw in Mattermost Leading to Uncontrolled Post Deletion
CVE-2024-50052
Currently unrated
What is CVE-2024-50052?
A vulnerability has been identified in Mattermost versions 9.10.x up to 9.10.2, 9.11.x up to 9.11.1, and 9.5.x up to 9.5.9. This issue arises from the lack of validation for the origin of messages in integration actions, allowing an authenticated user to delete any post regardless of ownership. This weakness highlights the importance of proper authorization checks to prevent unauthorized modifications within the application.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.