CVE-2017-18905

2020-06-1920:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

JSON

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2, when used as an OAuth 2.0 service provider, Session invalidation was mishandled.

CPENameOperatorVersion
mattermost-servereq3.3.0
mattermost-servereq3.0.0
mattermost-servereq3.2.0
mattermost-servereq3.7.1
mattermost-servereq1.0.0
mattermost-servereq3.0.3
mattermost-servereq0.5.0
mattermost-servereq3.7.2
mattermost-servereq3.4.0
mattermost-servereq3.6.0

Name	Operator	Version
mattermost-server	eq	3.3.0
mattermost-server	eq	3.0.0
mattermost-server	eq	3.2.0
mattermost-server	eq	3.7.1
mattermost-server	eq	1.0.0
mattermost-server	eq	3.0.3
mattermost-server	eq	0.5.0
mattermost-server	eq	3.7.2
mattermost-server	eq	3.4.0
mattermost-server	eq	3.6.0

Rows per page:

1-10 of 301

References

mattermost.com/security-updates/