Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:28 p.m.•15 views

CVE-2018-21254

An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control for direct-message channel creation via the Message slash command...

4.3CVSS7AI score0.00615EPSS
SaveExploits0References1
OSV
OSV
•added 2020/06/19 5:15 p.m.•20 views

CVE-2018-21254

An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control for direct-message channel creation via the Message slash command...

4.3CVSS6.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2020/06/19 4:49 p.m.•37 views

CVE-2018-21254

An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control for direct-message channel creation via the Message slash command...

4.7AI score0.00615EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/19 12:00 a.m.•3 views

CVE-2018-21256: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions for group-message channel creation via the Group message slash command...

4.3CVSS5.8AI score0.00615EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/19 12:00 a.m.•5 views

CVE-2018-21254: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control for direct-message channel creation via the Message slash command...

4.3CVSS5.8AI score0.00615EPSS
SaveExploits0References2
Rows per page
Query Builder