CVE-2017-18872

2020-06-1918:15:10

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.7%

JSON

An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.

References

mattermost.com/security-updates/