CVE-2017-18870
19.06.2020, 17:15
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mattermost | mattermost_server | 𝑥 < 4.3.4 |
| mattermost | mattermost_server | 4.4.0 ≤ 𝑥 < 4.4.5 |
| mattermost | mattermost_server | 4.5.0:rc1 |
| mattermost | mattermost_server | 4.5.0:rc2 |
| mattermost | mattermost_server | 4.5.0:rc3 |
| mattermost | mattermost_server | 4.5.0:rc4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration