CVE-2022-1384
19.04.2022, 21:15
Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mattermost | mattermost_server | 𝑥 < 6.5.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-477 - Use of Obsolete FunctionThe code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.
- CWE-862 - Missing AuthorizationThe software does not perform an authorization check when an actor attempts to access a resource or perform an action.