CVE-2024-39613 — RCE in desktop app in Windows by local attacker
Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in th…
Published: 2024-09-16 · CVSS: 5.3 · CVSS 3.1
Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an cmd.exe file in the Downloads folder of a user's machine to cause remote code execution on that machine.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7