CVE-2019-20841
19.06.2020, 14:15
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks.
| Vendor | Product | Version |
|---|---|---|
| mattermost | mattermost_server | 𝑥 < 5.9.7 |
| mattermost | mattermost_server | 5.15.0 ≤ 𝑥 < 5.15.4 |
| mattermost | mattermost_server | 5.16.0 ≤ 𝑥 < 5.16.4 |
| mattermost | mattermost_server | 5.17.0 ≤ 𝑥 < 5.17.2 |
| mattermost | mattermost_server | 5.18.0:rc1 |
| mattermost | mattermost_server | 5.18.0:rc2 |
| mattermost | mattermost_server | 5.18.0:rc3 |
| mattermost | mattermost_server | 5.18.0:rc4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration