CVE-2017-18907

2020-06-1920:15:12

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

An issue was discovered in Mattermost Server before 4.0.0, 3.10.2, and 3.9.2. XSS could occur via a channel header.

CPENameOperatorVersion
mattermost-servereq3.3.0
mattermost-servereq3.0.0
mattermost-servereq3.2.0
mattermost-servereq3.7.1
mattermost-servereq1.0.0
mattermost-servereq3.0.3
mattermost-servereq0.5.0
mattermost-servereq3.7.2
mattermost-servereq3.4.0
mattermost-servereq3.6.0

Name	Operator	Version
mattermost-server	eq	3.3.0
mattermost-server	eq	3.0.0
mattermost-server	eq	3.2.0
mattermost-server	eq	3.7.1
mattermost-server	eq	1.0.0
mattermost-server	eq	3.0.3
mattermost-server	eq	0.5.0
mattermost-server	eq	3.7.2
mattermost-server	eq	3.4.0
mattermost-server	eq	3.6.0

Rows per page:

1-10 of 301

References

mattermost.com/security-updates/