CVE-2024-5270

Summary

CVE-2024-5270 is a vulnerability affecting Mattermost versions 9.5.x through 9.5.3, 9.7.x through 9.7.1, 9.6.x through 9.6.1, and 8.1.x through 8.1.12. This issue arises due to a failure to verify email signup configuration options during the switch from Single Sign-On (SAML) to email authentication. As a result, users can bypass the SAML-provided personal details and potentially edit non-editable information. This vulnerability poses a risk for unauthorized modification of user accounts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.