PT-2024-28668

CVE-2024-39772

·

Published

2024-09-16

·

Updated

2024-11-01

Description by

CVSS 4.0
6.3
Medium
MetricsAV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions <=5.8.0
Description The issue concerns a flaw in the screen capture functionality of the Mattermost Desktop App, allowing an attacker to silently capture high-quality screenshots via JavaScript APIs.
Recommendations For Mattermost Desktop App versions <=5.8.0, update to a version higher than 5.8.0 to resolve the issue. As a temporary workaround, consider disabling the screen capture functionality until a patch is available. Restrict access to sensitive information on devices running the affected versions to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-5777-RCJJ-9P22
BIT-MATTERMOST-2024-39772
Found an issue in the description? Have something to add? Feel free to write us 👾