Cross site request forgery (csrf)

2020-06-1916:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10. The login page allows CSRF.

CPENameOperatorVersion
mattermost_serverge5.10.0
mattermost_serverlt5.10.2
mattermost_servereq5.12.0 rc6
mattermost_servereq5.12.0 rc5
mattermost_servereq5.12.0 rc1
mattermost_servereq5.12.0 rc2
mattermost_servereq5.12.0 rc3
mattermost_servereq5.12.0 rc4
mattermost_serverge5.11.0
mattermost_serverlt5.11.1

Name	Operator	Version
mattermost_server	ge	5.10.0
mattermost_server	lt	5.10.2
mattermost_server	eq	5.12.0 rc6
mattermost_server	eq	5.12.0 rc5
mattermost_server	eq	5.12.0 rc1
mattermost_server	eq	5.12.0 rc2
mattermost_server	eq	5.12.0 rc3
mattermost_server	eq	5.12.0 rc4
mattermost_server	ge	5.11.0
mattermost_server	lt	5.11.1

Rows per page:

1-10 of 131

References

mattermost.com/security-updates/