CVE-2024-39353

Name of the Vulnerable Software and Affected Versions Mattermost versions 9.5.x through 9.5.5 Mattermost version 9.8.0

Description The issue allows a high-privileged attacker with access to the audit logs to read message contents due to the failure to sanitize the RemoteClusterFrame payloads before audit logging them.

Recommendations For Mattermost versions 9.5.x through 9.5.5, update to a version that addresses this issue. For Mattermost version 9.8.0, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the audit logs to minimize the risk of exploitation.