CVE-2016-11073

2020-06-1920:15:11

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a Legal or Support setting.

CPENameOperatorVersion
mattermost-servereq1.1.1
mattermost-servereq2.0.0
mattermost-servereq0.6.0
mattermost-servereq1.4.0
mattermost-servereq1.0.0
mattermost-servereq1.3.0
mattermost-servereq0.5.0
mattermost-servereq1.2.1
mattermost-servereq1.1.0

Name	Operator	Version
mattermost-server	eq	1.1.1
mattermost-server	eq	2.0.0
mattermost-server	eq	0.6.0
mattermost-server	eq	1.4.0
mattermost-server	eq	1.0.0
mattermost-server	eq	1.3.0
mattermost-server	eq	0.5.0
mattermost-server	eq	1.2.1
mattermost-server	eq	1.1.0

References

mattermost.com/security-updates/