CVE-2017-18919

2020-06-1920:15:12

Google

osv.dev

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.2%

JSON

An issue was discovered in Mattermost Server before 3.7.0 and 3.6.3. Attackers can use the API for unauthenticated team creation.

CPENameOperatorVersion
mattermost-servereq3.6.2
mattermost-servereq3.3.0
mattermost-servereq3.0.0
mattermost-servereq3.2.0
mattermost-servereq1.0.0
mattermost-servereq3.0.3
mattermost-servereq0.5.0
mattermost-servereq3.4.0
mattermost-servereq3.6.0
mattermost-servereq1.4.0

Name	Operator	Version
mattermost-server	eq	3.6.2
mattermost-server	eq	3.3.0
mattermost-server	eq	3.0.0
mattermost-server	eq	3.2.0
mattermost-server	eq	1.0.0
mattermost-server	eq	3.0.3
mattermost-server	eq	0.5.0
mattermost-server	eq	3.4.0
mattermost-server	eq	3.6.0
mattermost-server	eq	1.4.0

Rows per page:

1-10 of 221

References

mattermost.com/security-updates/