CVE-2017-18891

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link...

CVE-2017-18891

Mattermost Server prior to 4.2.0, 4.1.1, and 4.0.5 is affected by a phishing vulnerability where an error page can contain a link that misleads users. Root cause per available descriptions is insufficient protection around error pages, enabling potential credential or data exposure via user inter...