CVE-2017-18921

2020-06-1920:15:12

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

An issue was discovered in Mattermost Server before 3.6.0 and 3.5.2. XSS can occur via a link on an error page.

CPENameOperatorVersion
mattermost-servereq3.3.0
mattermost-servereq3.0.0
mattermost-servereq3.2.0
mattermost-servereq1.0.0
mattermost-servereq3.0.3
mattermost-servereq0.5.0
mattermost-servereq3.4.0
mattermost-servereq1.4.0
mattermost-servereq1.3.0
mattermost-servereq2.0.0

Name	Operator	Version
mattermost-server	eq	3.3.0
mattermost-server	eq	3.0.0
mattermost-server	eq	3.2.0
mattermost-server	eq	1.0.0
mattermost-server	eq	3.0.3
mattermost-server	eq	0.5.0
mattermost-server	eq	3.4.0
mattermost-server	eq	1.4.0
mattermost-server	eq	1.3.0
mattermost-server	eq	2.0.0

Rows per page:

1-10 of 191

References

mattermost.com/security-updates/