PT-2024-28668 · Mattermost · Mattermost Desktop App

·

CVE-2024-39772

·

تاريخ النشر

2024-09-16

·

تاريخ التحديث

2024-11-01

CVSS v4.0

6.3

متوسطة

المتجهAV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions <=5.8.0
Description The issue concerns a flaw in the screen capture functionality of the Mattermost Desktop App, allowing an attacker to silently capture high-quality screenshots via JavaScript APIs.
Recommendations For Mattermost Desktop App versions <=5.8.0, update to a version higher than 5.8.0 to resolve the issue. As a temporary workaround, consider disabling the screen capture functionality until a patch is available. Restrict access to sensitive information on devices running the affected versions to minimize the risk of exploitation.

استغلال

إصلاح

Improper Access Control

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BIT-MATTERMOST-2024-39772
CVE-2024-39772
GHSA-5777-RCJJ-9P22

المنتجات المتأثرة

Mattermost Desktop App