CVE-2021-37861

2021-12-0922:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Mattermost 6.0.2 and earlier fails to sufficiently sanitize user’s password in audit logs when user creation fails.

CPENameOperatorVersion
mattermosteq3.7.3
mattermosteq4.10.0-rc4
mattermosteq5.1.0-rc2
mattermosteq5.1.0-rc4
mattermosteqcloud-2020-12-08
mattermosteq5.3.0-rc1
mattermosteq1.1.1
mattermosteq4.7.2-rc3
mattermosteq3.0.0
mattermosteq4.5.2

Name	Operator	Version
mattermost	eq	3.7.3
mattermost	eq	4.10.0-rc4
mattermost	eq	5.1.0-rc2
mattermost	eq	5.1.0-rc4
mattermost	eq	cloud-2020-12-08
mattermost	eq	5.3.0-rc1
mattermost	eq	1.1.1
mattermost	eq	4.7.2-rc3
mattermost	eq	3.0.0
mattermost	eq	4.5.2

Rows per page:

1-10 of 1441

References

mattermost.com/security-updates/