Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2022-1384

CVE-2022-1384

MEDIUM4.7

Authorized users are allowed to install old plugin versions from the Marketplace

Published Apr 19, 2022

Modified 1 years ago

Details

Mattermost version 6.4.x and earlier fails to properly check the plugin version when a plugin is installed from the Marketplace, which allows an authenticated and an authorized user to install and exploit an old plugin version from the Marketplace which might have known vulnerabilities.

References

https://mattermost.com/security-updates/

https://www.cve.org/CVERecord?id=CVE-2022-1384

CVSS Analysis

CVSS v3.1

4.7

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

4.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedApr 19, 2022

ModifiedDec 6, 2024

CVE-2022-1384 | Mondoo Vulnerability Intelligence