CVE-2017-18894

creationtimestamp| type| source ---|---|--- 2020-06-19 22:55:17+00:00| seen| https://t.me/cibsecurity/12913...

CVE-2017-18894

Mattermost Server before 4.2.0, 4.1.1, and 4.0.5 is affected when used as an OAuth 2.0 service provider: resource-owner authorization can be intermittently bypassed, enabling account takeover. Root cause: bypass of resource-owner authorization in OAuth 2.0 flow. Impact: potential account takeover...