CVE-2017-18920

2020-06-1920:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.7%

JSON

An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.

CPENameOperatorVersion
mattermost-servereq3.3.0
mattermost-servereq3.0.0
mattermost-servereq3.2.0
mattermost-servereq1.0.0
mattermost-servereq3.0.3
mattermost-servereq0.5.0
mattermost-servereq3.4.0
mattermost-servereq3.6.0
mattermost-servereq1.4.0
mattermost-servereq1.3.0

Name	Operator	Version
mattermost-server	eq	3.3.0
mattermost-server	eq	3.0.0
mattermost-server	eq	3.2.0
mattermost-server	eq	1.0.0
mattermost-server	eq	3.0.3
mattermost-server	eq	0.5.0
mattermost-server	eq	3.4.0
mattermost-server	eq	3.6.0
mattermost-server	eq	1.4.0
mattermost-server	eq	1.3.0

Rows per page:

1-10 of 211

References

mattermost.com/security-updates/