CVE-2024-2450

Summary

CVE-2024-2450 is a vulnerability affecting Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3. This issue arises due to a flaw in account ownership verification during the switch from email to SAML authentication. An authenticated attacker can exploit this vulnerability by crafting a malicious switch request under specific conditions, resulting in unauthorized account takeover of other users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.