CVE-2024-32046

Published: 2024-04-26T09:15Z

Last Modified: 2024-11-21T09:14Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Mattermost versions 9.6.x <= 9.6.0, 9.5.x <= 9.5.2, 9.4.x <= 9.4.4 and 8.1.x <= 8.1.11 fail to remove detailed error messages in API requests even if the developer mode is off which allows an attacker to get information about the server such as the full path were files are stored > MITRE Terms of Use apply – see LICENSE‑MITRE.txt