Lucene search
MattermostCVELIST:CVE-2021-37863HistoryDec 17, 2021 - 4:10 p.m.
CVE-2021-37863
2021-12-1716:10:30
CWE-20
Mattermost
www.cve.org
4
mattermost 6.0
validation
vulnerability
web application
authenticated attackers
client-side crash
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
36.3%
Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a client-side crash of the web application via a maliciously crafted post.
CNA Affected
[
{
"product": "Mattermost ",
"vendor": "Mattermost ",
"versions": [
{
"lessThanOrEqual": "6.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
CVE-2021-37863
2021-12-17 17:15:12
BIT-mattermost-2021-37863
2024-03-06 11:04:59
cnvd
cnvd
Mattermost Input Validation Error Vulnerability (CNVD-2022-08350)
2021-12-20 00:00:00
prion
prion
Code injection
2021-12-17 17:15:00
hackerone
hackerone
cve
cve
CVE-2021-37863
2021-12-17 17:15:12
nvd
nvd
CVE-2021-37863
2021-12-17 17:15:12
CVSS3
3.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
AI Score
5.7
Confidence
High
EPSS
0.001
Percentile
36.3%
Related for CVELIST:CVE-2021-37863