2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Mattermost","vendor":"Mattermost","versions":[{"lessThanOrEqual":"6.2.0","status":"affected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.2.13","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"6.1.0"},{"status":"unaffected","version":"6.0.3.0"},{"status":"unaffected","version":"5.13.3.0"}]}],"source":"responsibledisclosure@mattermost.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*","matchCriteriaId":"524C6EEC-F1BD-410B-8FB7-0459A8759841","versionEndExcluding":"5.13.3","versionStartIncluding":"5.13.0","vulnerable":true},{"criteria":"cpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*","matchCriteriaId":"6A567559-94D1-4F5E-9D34-1E8A441B6657","versionEndExcluding":"6.0.3","versionStartIncluding":"6.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on certain items in the Help menu Mattermost Advisory ID: MMSA-2026-00577"},{"lang":"es","value":"Las versiones <=6.0 6.2.0 5.2.13.0 de la Aplicación de escritorio Mattermost no validan los enlaces de ayuda, lo que permite que un servidor Mattermost malicioso ejecute ejecutables arbitrarios en el sistema de un usuario al hacer clic el usuario en ciertos elementos del menú de Ayuda. ID de aviso de Mattermost: MMSA-2026-00577"}],"id":"CVE-2026-1046","lastModified":"2026-10-15T13:32:28.463","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.6,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:L","version":"3.1"},"exploitabilityScore":2.3,"impactScore":4.7,"source":"responsibledisclosure@mattermost.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1046","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-02-17T16:42:12.292444Z","version":"2.0.3"}}]},"published":"2026-02-16T13:16:00.793","references":[{"source":"responsibledisclosure@mattermost.com","tags":["Vendor Advisory"],"url":"https://mattermost.com/security-updates"}],"sourceIdentifier":"responsibledisclosure@mattermost.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-939"}],"source":"responsibledisclosure@mattermost.com","type":"Secondary"}]}
|