Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an attacker to silently capture high-quality screenshots via JavaScript APIs.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Mattermost Desktop App versions <=5.8.0 fail to safeguard screen capture functionality which allows an
    attacker to silently capture high-quality screenshots via JavaScript APIs. (CVE-2024-39772)

The version of Mattermost Desktop installed on the remote host is prior to 5.9.0. It is,   therefore, affected by a vulnerability as referenced in the MMSA-2024-00372 advisory.

  - Mattermost versions  < 5.9.0 Mattermost Desktop app have a vulnerability in their screen capture     functionality, allowing attackers to potentially capture high-quality screenshots without user knowledge via     JavaScript APIs. This vulnerability poses a low confidentiality impact and can be exploited over a network     without requiring user interaction or elevated privileges

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Mattermost Desktop installed on the remote host is prior to 5.9.0. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00372 advisory.

  - Mattermost versions  < 5.9.0 Mattermost Desktop app have a vulnerability in their screen capture     functionality, allowing attackers to potentially capture high-quality screenshots without user knowledge via     JavaScript APIs. This vulnerability poses a low confidentiality impact and can be exploited over a network     without requiring user interaction or elevated privileges

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
410644	SCA: security update for mattermost-desktop (GHSA-5777-rcjj-9p22)	Tenable Cloud Security	SCA Checks	medium
410644	SCA: security update for mattermost-desktop (GHSA-5777-rcjj-9p22)	Tenable Self-Hosted Container Security	SCA Checks	medium
207455	Mattermost Desktop < 5.9.0 (macOS) (MMSA-2024-00372)	Nessus	MacOS X Local Security Checks	medium
207453	Mattermost Desktop < 5.9.0 (Windows / Unix) (MMSA-2024-00372)	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2024-39772

medium

Tenable Plugins

medium

medium

medium

medium