CVE-2018-21251

2020-06-1916:49:18

mitre

www.cve.org

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

JSON

An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body.

References

mattermost.com/security-updates/