Code injection

2020-06-1919:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.9%

An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints.

CPENameOperatorVersion
mattermost_serverge4.0.0
mattermost_serverlt4.0.4
mattermost_serverlt3.10.3

Name	Operator	Version
mattermost_server	ge	4.0.0
mattermost_server	lt	4.0.4
mattermost_server	lt	3.10.3

References

mattermost.com/security-updates/