CVE-2024-4182

Name of the Vulnerable Software and Affected Versions Mattermost versions 8.1.x through 8.1.11 Mattermost versions 9.4.x through 9.4.4 Mattermost versions 9.5.x through 9.5.2 Mattermost version 9.6.0

Description The issue arises from the failure to handle JSON parsing errors in custom status values, allowing an authenticated attacker to crash other users' web clients via a malformed custom status.

Recommendations For Mattermost versions 8.1.x through 8.1.11, update to version 8.1.12 or later. For Mattermost versions 9.4.x through 9.4.4, update to version 9.4.5 or later. For Mattermost versions 9.5.x through 9.5.2, update to version 9.5.3 or later. For Mattermost version 9.6.0, update to a version that includes the fix for this issue.