CVE-2024-10214

Name of the Vulnerable Software and Affected Versions Mattermost versions 9.5.x through 9.5.9 Mattermost versions 9.11.X through 9.11.1

Description The issue arises when using desktop SSO, where Mattermost incorrectly issues two sessions - one in the browser and one in the desktop application, both with incorrect settings.

Recommendations For versions 9.5.x through 9.5.9, update to the latest release to mitigate the risk. For versions 9.11.X through 9.11.1, update to the latest release to mitigate the risk. As a temporary workaround, consider restricting the use of desktop SSO until a patch is available.