Mattermost Server@3.6.0 Security Vulnerabilities and Issues — Mattermost Server@3.6.0 CVE List

Lucene search

MattermostMattermost Server3.6.0

3 matches found

cve•added 2020/06/19 8:15 p.m.•33 views

CVE-2017-18918

An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.

4.9CVSS5.2AI score0.00098EPSS

cve•added 2020/06/19 8:15 p.m.•30 views

CVE-2017-18915

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access.

9.8CVSS9.5AI score0.00408EPSS

cve•added 2020/06/19 8:15 p.m.•29 views

CVE-2017-18917

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens.

7.5CVSS7.5AI score0.00151EPSS