CVE-2018-21254

creationtimestamp| type| source ---|---|--- 2020-06-19 20:55:31+00:00| seen| https://t.me/cibsecurity/12897...

CVE-2018-21254

Mattermost Server before 5.1 contains a vulnerability where an attacker can bypass access control for direct-message channel creation via the Message slash command. Affected component: Mattermost Server (pre-5.1). Root cause and exact underlying mechanism are not detailed in the provided document...