Home

Description

Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration.

PUBLISHED Reserved 2024-11-21 | Published 2024-11-28 | Updated 2024-11-29 | Assigner Mattermost




HIGH: 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Problem types

CWE-754 Improper Check for Unusual or Exceptional Conditions

Product status

Default status
unaffected

10.0.0 (semver)
affected

10.1.0 (semver)
affected

9.11.0 (semver)
affected

9.5.0 (semver)
affected

10.2.0
unaffected

10.0.2
unaffected

10.1.2
unaffected

9.11.4
unaffected

9.5.12
unaffected

Credits

jofra (v_jofra) finder

References

mattermost.com/security-updates

cve.org (CVE-2024-11599)

nvd.nist.gov (CVE-2024-11599)

Download JSON