x/vulndb: potential Go vuln in github.com/mattermost/mattermost/server/v8: GHSA-fxq9-6946-34q7

Advisory [GHSA-fxq9-6946-34q7](https://github.com/advisories/GHSA-fxq9-6946-34q7) references a vulnerability in the following Go modules:

| Module |
| - |
| [github.com/mattermost/mattermost-server](https://pkg.go.dev/github.com/mattermost/mattermost-server) |
| [github.com/mattermost/mattermost-server/v5](https://pkg.go.dev/github.com/mattermost/mattermost-server/v5) |
| [github.com/mattermost/mattermost-server/v6](https://pkg.go.dev/github.com/mattermost/mattermost-server/v6) |
| [github.com/mattermost/mattermost/server/v8](https://pkg.go.dev/github.com/mattermost/mattermost/server/v8) |

Description:
Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams.

References:
- ADVISORY: https://github.com/advisories/GHSA-fxq9-6946-34q7
- ADVISORY: https://nvd.nist.gov/vuln/detail/CVE-2024-42497
- WEB: https://mattermost.com/security-updates

Cross references:
- github.com/mattermost/mattermost-server appears in 45 other report(s):
  - data/excluded/GO-2022-0601.yaml    (https://github.com/golang/vulndb/issues/601)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2022-1126.yaml    (https://github.com/golang/vulndb/issues/1126)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2022-1127.yaml    (https://github.com/golang/vulndb/issues/1127)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-1710.yaml    (https://github.com/golang/vulndb/issues/1710)    EFFECTIVELY_PRIVATE
  - data/reports/GO-2022-0540.yaml    (https://github.com/golang/vulndb/issues/540)
  - data/reports/GO-2022-0576.yaml    (https://github.com/golang/vulndb/issues/576)
  - data/reports/GO-2022-0595.yaml    (https://github.com/golang/vulndb/issues/595)
  - data/reports/GO-2022-0599.yaml    (https://github.com/golang/vulndb/issues/599)
  - data/reports/GO-2022-0604.yaml    (https://github.com/golang/vulndb/issues/604)
  - data/reports/GO-2022-0616.yaml    (https://github.com/golang/vulndb/issues/616)
  - data/reports/GO-2023-1939.yaml    (https://github.com/golang/vulndb/issues/1939)
  - data/reports/GO-2024-2444.yaml    (https://github.com/golang/vulndb/issues/2444)
  - data/reports/GO-2024-2446.yaml    (https://github.com/golang/vulndb/issues/2446)
  - data/reports/GO-2024-2448.yaml    (https://github.com/golang/vulndb/issues/2448)
  - data/reports/GO-2024-2450.yaml    (https://github.com/golang/vulndb/issues/2450)
  - data/reports/GO-2024-2541.yaml    (https://github.com/golang/vulndb/issues/2541)
  - data/reports/GO-2024-2566.yaml    (https://github.com/golang/vulndb/issues/2566)
  - data/reports/GO-2024-2588.yaml    (https://github.com/golang/vulndb/issues/2588)
  - data/reports/GO-2024-2589.yaml    (https://github.com/golang/vulndb/issues/2589)
  - data/reports/GO-2024-2590.yaml    (https://github.com/golang/vulndb/issues/2590)
  - data/reports/GO-2024-2591.yaml    (https://github.com/golang/vulndb/issues/2591)
  - data/reports/GO-2024-2592.yaml    (https://github.com/golang/vulndb/issues/2592)
  - data/reports/GO-2024-2593.yaml    (https://github.com/golang/vulndb/issues/2593)
  - data/reports/GO-2024-2594.yaml    (https://github.com/golang/vulndb/issues/2594)
  - data/reports/GO-2024-2595.yaml    (https://github.com/golang/vulndb/issues/2595)
  - data/reports/GO-2024-2635.yaml    (https://github.com/golang/vulndb/issues/2635)
  - data/reports/GO-2024-2695.yaml    (https://github.com/golang/vulndb/issues/2695)
  - data/reports/GO-2024-2696.yaml    (https://github.com/golang/vulndb/issues/2696)
  - data/reports/GO-2024-2706.yaml    (https://github.com/golang/vulndb/issues/2706)
  - data/reports/GO-2024-2707.yaml    (https://github.com/golang/vulndb/issues/2707)
  - data/reports/GO-2024-2793.yaml    (https://github.com/golang/vulndb/issues/2793)
  - data/reports/GO-2024-2794.yaml    (https://github.com/golang/vulndb/issues/2794)
  - data/reports/GO-2024-2795.yaml    (https://github.com/golang/vulndb/issues/2795)
  - data/reports/GO-2024-2796.yaml    (https://github.com/golang/vulndb/issues/2796)
  - data/reports/GO-2024-2797.yaml    (https://github.com/golang/vulndb/issues/2797)
  - data/reports/GO-2024-2798.yaml    (https://github.com/golang/vulndb/issues/2798)
  - data/reports/GO-2024-3020.yaml    (https://github.com/golang/vulndb/issues/3020)
  - data/reports/GO-2024-3022.yaml    (https://github.com/golang/vulndb/issues/3022)
  - data/reports/GO-2024-3023.yaml    (https://github.com/golang/vulndb/issues/3023)
  - data/reports/GO-2024-3024.yaml    (https://github.com/golang/vulndb/issues/3024)
  - data/reports/GO-2024-3025.yaml    (https://github.com/golang/vulndb/issues/3025)
  - data/reports/GO-2024-3028.yaml    (https://github.com/golang/vulndb/issues/3028)
  - data/reports/GO-2024-3030.yaml    (https://github.com/golang/vulndb/issues/3030)
  - data/reports/GO-2024-3031.yaml    (https://github.com/golang/vulndb/issues/3031)
  - data/reports/GO-2024-3032.yaml    (https://github.com/golang/vulndb/issues/3032)
- github.com/mattermost/mattermost-server/v5 appears in 35 other report(s):
  - data/reports/GO-2022-0540.yaml    (https://github.com/golang/vulndb/issues/540)
  - data/reports/GO-2022-0576.yaml    (https://github.com/golang/vulndb/issues/576)
  - data/reports/GO-2022-0595.yaml    (https://github.com/golang/vulndb/issues/595)
  - data/reports/GO-2022-0599.yaml    (https://github.com/golang/vulndb/issues/599)
  - data/reports/GO-2022-0604.yaml    (https://github.com/golang/vulndb/issues/604)
  - data/reports/GO-2022-0616.yaml    (https://github.com/golang/vulndb/issues/616)
  - data/reports/GO-2023-1939.yaml    (https://github.com/golang/vulndb/issues/1939)
  - data/reports/GO-2024-2444.yaml    (https://github.com/golang/vulndb/issues/2444)
  - data/reports/GO-2024-2446.yaml    (https://github.com/golang/vulndb/issues/2446)
  - data/reports/GO-2024-2448.yaml    (https://github.com/golang/vulndb/issues/2448)
  - data/reports/GO-2024-2450.yaml    (https://github.com/golang/vulndb/issues/2450)
  - data/reports/GO-2024-2541.yaml    (https://github.com/golang/vulndb/issues/2541)
  - data/reports/GO-2024-2566.yaml    (https://github.com/golang/vulndb/issues/2566)
  - data/reports/GO-2024-2588.yaml    (https://github.com/golang/vulndb/issues/2588)
  - data/reports/GO-2024-2589.yaml    (https://github.com/golang/vulndb/issues/2589)
  - data/reports/GO-2024-2590.yaml    (https://github.com/golang/vulndb/issues/2590)
  - data/reports/GO-2024-2591.yaml    (https://github.com/golang/vulndb/issues/2591)
  - data/reports/GO-2024-2592.yaml    (https://github.com/golang/vulndb/issues/2592)
  - data/reports/GO-2024-2593.yaml    (https://github.com/golang/vulndb/issues/2593)
  - data/reports/GO-2024-2594.yaml    (https://github.com/golang/vulndb/issues/2594)
  - data/reports/GO-2024-2595.yaml    (https://github.com/golang/vulndb/issues/2595)
  - data/reports/GO-2024-2635.yaml    (https://github.com/golang/vulndb/issues/2635)
  - data/reports/GO-2024-2695.yaml    (https://github.com/golang/vulndb/issues/2695)
  - data/reports/GO-2024-2696.yaml    (https://github.com/golang/vulndb/issues/2696)
  - data/reports/GO-2024-2706.yaml    (https://github.com/golang/vulndb/issues/2706)
  - data/reports/GO-2024-2707.yaml    (https://github.com/golang/vulndb/issues/2707)
  - data/reports/GO-2024-3020.yaml    (https://github.com/golang/vulndb/issues/3020)
  - data/reports/GO-2024-3022.yaml    (https://github.com/golang/vulndb/issues/3022)
  - data/reports/GO-2024-3023.yaml    (https://github.com/golang/vulndb/issues/3023)
  - data/reports/GO-2024-3024.yaml    (https://github.com/golang/vulndb/issues/3024)
  - data/reports/GO-2024-3025.yaml    (https://github.com/golang/vulndb/issues/3025)
  - data/reports/GO-2024-3028.yaml    (https://github.com/golang/vulndb/issues/3028)
  - data/reports/GO-2024-3030.yaml    (https://github.com/golang/vulndb/issues/3030)
  - data/reports/GO-2024-3031.yaml    (https://github.com/golang/vulndb/issues/3031)
  - data/reports/GO-2024-3032.yaml    (https://github.com/golang/vulndb/issues/3032)
- github.com/mattermost/mattermost-server/v6 appears in 57 other report(s):
  - data/excluded/GO-2022-1028.yaml    (https://github.com/golang/vulndb/issues/1028)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-1711.yaml    (https://github.com/golang/vulndb/issues/1711)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-1712.yaml    (https://github.com/golang/vulndb/issues/1712)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-1727.yaml    (https://github.com/golang/vulndb/issues/1727)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-1778.yaml    (https://github.com/golang/vulndb/issues/1778)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-1873.yaml    (https://github.com/golang/vulndb/issues/1873)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2007.yaml    (https://github.com/golang/vulndb/issues/2007)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2008.yaml    (https://github.com/golang/vulndb/issues/2008)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2009.yaml    (https://github.com/golang/vulndb/issues/2009)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2010.yaml    (https://github.com/golang/vulndb/issues/2010)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2087.yaml    (https://github.com/golang/vulndb/issues/2087)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2089.yaml    (https://github.com/golang/vulndb/issues/2089)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2090.yaml    (https://github.com/golang/vulndb/issues/2090)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2091.yaml    (https://github.com/golang/vulndb/issues/2091)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2093.yaml    (https://github.com/golang/vulndb/issues/2093)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2358.yaml    (https://github.com/golang/vulndb/issues/2358)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2359.yaml    (https://github.com/golang/vulndb/issues/2359)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2360.yaml    (https://github.com/golang/vulndb/issues/2360)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2361.yaml    (https://github.com/golang/vulndb/issues/2361)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2362.yaml    (https://github.com/golang/vulndb/issues/2362)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2363.yaml    (https://github.com/golang/vulndb/issues/2363)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2364.yaml    (https://github.com/golang/vulndb/issues/2364)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2365.yaml    (https://github.com/golang/vulndb/issues/2365)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2366.yaml    (https://github.com/golang/vulndb/issues/2366)    EFFECTIVELY_PRIVATE
  - data/reports/GO-2022-0540.yaml    (https://github.com/golang/vulndb/issues/540)
  - data/reports/GO-2022-0576.yaml    (https://github.com/golang/vulndb/issues/576)
  - data/reports/GO-2022-0595.yaml    (https://github.com/golang/vulndb/issues/595)
  - data/reports/GO-2022-0599.yaml    (https://github.com/golang/vulndb/issues/599)
  - data/reports/GO-2022-0616.yaml    (https://github.com/golang/vulndb/issues/616)
  - data/reports/GO-2024-2444.yaml    (https://github.com/golang/vulndb/issues/2444)
  - data/reports/GO-2024-2446.yaml    (https://github.com/golang/vulndb/issues/2446)
  - data/reports/GO-2024-2448.yaml    (https://github.com/golang/vulndb/issues/2448)
  - data/reports/GO-2024-2450.yaml    (https://github.com/golang/vulndb/issues/2450)
  - data/reports/GO-2024-2541.yaml    (https://github.com/golang/vulndb/issues/2541)
  - data/reports/GO-2024-2566.yaml    (https://github.com/golang/vulndb/issues/2566)
  - data/reports/GO-2024-2588.yaml    (https://github.com/golang/vulndb/issues/2588)
  - data/reports/GO-2024-2589.yaml    (https://github.com/golang/vulndb/issues/2589)
  - data/reports/GO-2024-2590.yaml    (https://github.com/golang/vulndb/issues/2590)
  - data/reports/GO-2024-2591.yaml    (https://github.com/golang/vulndb/issues/2591)
  - data/reports/GO-2024-2592.yaml    (https://github.com/golang/vulndb/issues/2592)
  - data/reports/GO-2024-2593.yaml    (https://github.com/golang/vulndb/issues/2593)
  - data/reports/GO-2024-2594.yaml    (https://github.com/golang/vulndb/issues/2594)
  - data/reports/GO-2024-2595.yaml    (https://github.com/golang/vulndb/issues/2595)
  - data/reports/GO-2024-2635.yaml    (https://github.com/golang/vulndb/issues/2635)
  - data/reports/GO-2024-2695.yaml    (https://github.com/golang/vulndb/issues/2695)
  - data/reports/GO-2024-2696.yaml    (https://github.com/golang/vulndb/issues/2696)
  - data/reports/GO-2024-2706.yaml    (https://github.com/golang/vulndb/issues/2706)
  - data/reports/GO-2024-2707.yaml    (https://github.com/golang/vulndb/issues/2707)
  - data/reports/GO-2024-3020.yaml    (https://github.com/golang/vulndb/issues/3020)
  - data/reports/GO-2024-3022.yaml    (https://github.com/golang/vulndb/issues/3022)
  - data/reports/GO-2024-3023.yaml    (https://github.com/golang/vulndb/issues/3023)
  - data/reports/GO-2024-3024.yaml    (https://github.com/golang/vulndb/issues/3024)
  - data/reports/GO-2024-3025.yaml    (https://github.com/golang/vulndb/issues/3025)
  - data/reports/GO-2024-3028.yaml    (https://github.com/golang/vulndb/issues/3028)
  - data/reports/GO-2024-3030.yaml    (https://github.com/golang/vulndb/issues/3030)
  - data/reports/GO-2024-3031.yaml    (https://github.com/golang/vulndb/issues/3031)
  - data/reports/GO-2024-3032.yaml    (https://github.com/golang/vulndb/issues/3032)
- github.com/mattermost/mattermost/server/v8 appears in 32 other report(s):
  - data/excluded/GO-2023-2182.yaml    (https://github.com/golang/vulndb/issues/2182)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2183.yaml    (https://github.com/golang/vulndb/issues/2183)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2184.yaml    (https://github.com/golang/vulndb/issues/2184)    EFFECTIVELY_PRIVATE
  - data/excluded/GO-2023-2390.yaml    (https://github.com/golang/vulndb/issues/2390)    EFFECTIVELY_PRIVATE
  - data/reports/GO-2024-2444.yaml    (https://github.com/golang/vulndb/issues/2444)
  - data/reports/GO-2024-2446.yaml    (https://github.com/golang/vulndb/issues/2446)
  - data/reports/GO-2024-2448.yaml    (https://github.com/golang/vulndb/issues/2448)
  - data/reports/GO-2024-2450.yaml    (https://github.com/golang/vulndb/issues/2450)
  - data/reports/GO-2024-2541.yaml    (https://github.com/golang/vulndb/issues/2541)
  - data/reports/GO-2024-2566.yaml    (https://github.com/golang/vulndb/issues/2566)
  - data/reports/GO-2024-2588.yaml    (https://github.com/golang/vulndb/issues/2588)
  - data/reports/GO-2024-2589.yaml    (https://github.com/golang/vulndb/issues/2589)
  - data/reports/GO-2024-2590.yaml    (https://github.com/golang/vulndb/issues/2590)
  - data/reports/GO-2024-2591.yaml    (https://github.com/golang/vulndb/issues/2591)
  - data/reports/GO-2024-2592.yaml    (https://github.com/golang/vulndb/issues/2592)
  - data/reports/GO-2024-2593.yaml    (https://github.com/golang/vulndb/issues/2593)
  - data/reports/GO-2024-2594.yaml    (https://github.com/golang/vulndb/issues/2594)
  - data/reports/GO-2024-2595.yaml    (https://github.com/golang/vulndb/issues/2595)
  - data/reports/GO-2024-2635.yaml    (https://github.com/golang/vulndb/issues/2635)
  - data/reports/GO-2024-2695.yaml    (https://github.com/golang/vulndb/issues/2695)
  - data/reports/GO-2024-2696.yaml    (https://github.com/golang/vulndb/issues/2696)
  - data/reports/GO-2024-2706.yaml    (https://github.com/golang/vulndb/issues/2706)
  - data/reports/GO-2024-2707.yaml    (https://github.com/golang/vulndb/issues/2707)
  - data/reports/GO-2024-3020.yaml    (https://github.com/golang/vulndb/issues/3020)
  - data/reports/GO-2024-3022.yaml    (https://github.com/golang/vulndb/issues/3022)
  - data/reports/GO-2024-3023.yaml    (https://github.com/golang/vulndb/issues/3023)
  - data/reports/GO-2024-3024.yaml    (https://github.com/golang/vulndb/issues/3024)
  - data/reports/GO-2024-3025.yaml    (https://github.com/golang/vulndb/issues/3025)
  - data/reports/GO-2024-3028.yaml    (https://github.com/golang/vulndb/issues/3028)
  - data/reports/GO-2024-3030.yaml    (https://github.com/golang/vulndb/issues/3030)
  - data/reports/GO-2024-3031.yaml    (https://github.com/golang/vulndb/issues/3031)
  - data/reports/GO-2024-3032.yaml    (https://github.com/golang/vulndb/issues/3032)

See [doc/quickstart.md](https://github.com/golang/vulndb/blob/master/doc/quickstart.md) for instructions on how to triage this report.

```
id: GO-ID-PENDING
modules:
    - module: github.com/mattermost/mattermost-server
      versions:
        - introduced: 9.5.0+incompatible
        - fixed: 9.5.8+incompatible
        - introduced: 9.8.0+incompatible
        - fixed: 9.8.3+incompatible
        - introduced: 9.9.0+incompatible
        - fixed: 9.9.2+incompatible
        - introduced: 9.10.0+incompatible
        - fixed: 9.10.1+incompatible
      vulnerable_at: 9.10.1-rc3+incompatible
    - module: github.com/mattermost/mattermost-server/v5
      vulnerable_at: 5.39.3
    - module: github.com/mattermost/mattermost-server/v6
      vulnerable_at: 6.7.2
    - module: github.com/mattermost/mattermost/server/v8
      vulnerable_at: 8.0.0-20240822154143-e622488badb8
summary: |-
    Mattermost allows user with systems manager role with read-only access to teams
    to perform write operations on teams in github.com/mattermost/mattermost-server
cves:
    - CVE-2024-42497
ghsas:
    - GHSA-fxq9-6946-34q7
references:
    - advisory: https://github.com/advisories/GHSA-fxq9-6946-34q7
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-42497
    - web: https://mattermost.com/security-updates
source:
    id: GHSA-fxq9-6946-34q7
    created: 2024-08-22T20:02:46.154296213Z
review_status: UNREVIEWED

```

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

x/vulndb: potential Go vuln in github.com/mattermost/mattermost/server/v8: GHSA-fxq9-6946-34q7 #3091

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

x/vulndb: potential Go vuln in github.com/mattermost/mattermost/server/v8: GHSA-fxq9-6946-34q7 #3091

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions