CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.
CVE
CVE-2024-10241
Severity
MEDIUM
CVSS
4.3
EPSS
0.29%
Original NVD Description
Mattermost versions 9.5.x <= 9.5.9 fail to properly filter the channel data when ElasticSearch is enabled which allows a user to get private channel names by using cmd+K/ctrl+K.
Related CVEs
Other vulnerabilities affecting the same vendor(s)