CVE-2017-18870

EUVD-2017-9960
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
mattermostmattermost_server
𝑥
< 4.3.4
mattermostmattermost_server
4.4.0 ≤
𝑥
< 4.4.5
mattermostmattermost_server
4.5.0:rc1
mattermostmattermost_server
4.5.0:rc2
mattermostmattermost_server
4.5.0:rc3
mattermostmattermost_server
4.5.0:rc4
𝑥
= Vulnerable software versions