CVE-2017-18902

An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints...

CVE-2017-18902

Mattermost Server contains a vulnerability affecting versions before 4.1.0, 4.0.4, and 3.10.3 where team invite IDs can be disclosed via team API endpoints. The exact root cause is not detailed in the provided documents, but the issue enables an information disclosure via the API. Impact is limit...

Input validation

In Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a malformed Team API request that bypasses input validation and causes an application level denial of service condition. The fix for this was also backported to LTS 2019.9.8 and LTS 2019.6.14...