CVE-2024-23493

Summary

CVE-2024-23493 is a vulnerability affecting Mattermost, an open-source collaborative messaging platform. This issue arises due to Mattermost's inability to properly authorize requests for fetching Active Directory/LDAP (AD/LDAP) groups. As a result, a user can access group details of teams they are not a member of, potentially leading to unauthorized access and information disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.