CVE-2024-2450

Vulnerability Description

Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctly verify account ownership when switching from email to SAML authentication, allowing an authenticated attacker to take over other user accounts via a crafted switch request under specific conditions.

Vulnerability Details

Published Date

March 15, 2024

Last Modified

December 13, 2024

Source

NVD

CVE-2024-2450

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment