CVE-2024-36255

Summary

CVE-2024-36255 is a vulnerability impacting Mattermost versions 9.5.x up to 9.5.3, 9.6.x up to 9.6.1, and 8.1.x up to 8.1.12. This issue stems from insufficient input validation on post actions, enabling attackers to execute a playbook checklist task command under another user's identity. By creating and sharing a deceptive post action, an adversary can unexpectedly trigger a slash command in any channel, potentially compromising security and confidentiality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.