← Back to CVE List

CVE-2024-36250

Published: 2024-11-09T18:15Z
Last Modified: 2024-11-14T17:11Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Mattermost versions 9.11.x <= 9.11.2, and 9.5.x <= 9.5.10 fail to protect the mfa code against replay attacks, which allows an attacker to reuse the MFA code within ~30 seconds > MITRE Terms of Use apply – see LICENSE‑MITRE.txt