CVE-2018-21260

2020-06-1917:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.7%

JSON

An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.

CPENameOperatorVersion
mattermost-servereq4.6.0
mattermost-servereq4.6.2-rc1
mattermost-servereq4.6.2
mattermost-servereq4.6.1-rc1
mattermost-servereq4.6.0-rc6
mattermost-servereq4.6.0-rc5
mattermost-servereq4.6.1

Name	Operator	Version
mattermost-server	eq	4.6.0
mattermost-server	eq	4.6.2-rc1
mattermost-server	eq	4.6.2
mattermost-server	eq	4.6.1-rc1
mattermost-server	eq	4.6.0-rc6
mattermost-server	eq	4.6.0-rc5
mattermost-server	eq	4.6.1

References

mattermost.com/security-updates/