Medium WID-SEC-2024-2142 1 CVE

Mattermost Desktop App: Schwachstelle ermöglicht Codeausführung

Published Sep 15, 2024 · Updated Sep 15, 2024 · de-DE

Vendor: Mattermost Product: Mattermost Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mattermost Desktop App ausnutzen, um beliebigen Programmcode auszuführen.

Product

Mattermost ist ein webbasierter Instant-Messaging-Dienst.

Vulnerabilities 1

Medium 5.3

CVE-2024-39613

RCE in desktop app in Windows by local attacker

Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machi…

Mattermost Mattermost mattermost-desktop npm

Sep 16, 2024

Revision history

2024-09-15 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2024-09-15
https://nvd.nist.gov/vuln/detail/CVE-2024-39613
Mattermost Security Update
https://mattermost.com/security-updates/