Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-24774

Mattermost Jira Plugin handling subscriptions fails to check the security level of an incoming issue or limit it based on the user who created the subscription resulting in registered users on Jira being able to create webhooks that give them access to all Jira issues.

Published

2024-02-09T15:15:08.343

Last Modified

2024-11-21T08:59:40.547

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.4 (LOW)

Weaknesses
  • Type: Secondary
    CWE-863
  • Type: Primary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mattermost mattermost_server ≤ 8.1.7 Yes
References