CVE-2024-39353: RemoteClusterFrame payloads are audit logged in full
Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high privileged attacker with access to the audit logs to read message contents.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39353?
CVE-2024-39353 is classified as a high severity vulnerability due to its potential to expose sensitive message contents to high privileged attackers.
How do I fix CVE-2024-39353?
To fix CVE-2024-39353, you should upgrade Mattermost to a version higher than 9.5.5 or to 9.8.1 or above.
Which versions of Mattermost are affected by CVE-2024-39353?
CVE-2024-39353 affects Mattermost versions 9.5.0 through 9.5.5 and specifically version 9.8.0.
What does CVE-2024-39353 exploit?
CVE-2024-39353 exploits the failure of Mattermost to sanitize RemoteClusterFrame payloads before auditing, allowing access to sensitive data.
Who can be impacted by CVE-2024-39353?
CVE-2024-39353 can impact organizations where high privileged users have access to audit logs, potentially exposing confidential message content.