Approved changes feed: RSS · Atom

cpe:2.3:a:mattermost:mattermost_server:9.3.0:rc1:*:*:*:*:*:*

part: a version: 9.3.0 update: rc1

VendorMattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc)
ProductMattermost Server (657bc445-594e-5ca1-a676-4f18538f1c02)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mattermost/mattermost-server purl2cpe 2026-06-01 10:18:20.034107

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23493 vulnerable 2026-06-03 14:55:03.965255 Team associated AD/LDAP Groups Leaked due to missing authorization
MEDIUM (4.3)
Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of. 
Published: 2024-02-29T08:02:32.128Z
Updated: 2024-08-01T23:06:24.717Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.