Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9g34-2mp9-r344

Опубликовано: 28 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration.

Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration.

EPSS

Процентиль: 23%
0.00076
Низкий

8.2 High

CVSS3

Дефекты

CWE-754

Связанные уязвимости

CVSS3: 8.2
nvd
около 1 года назад

Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate email addresses which allows an unauthenticated user to bypass email domain restrictions via carefully crafted input on email registration.

CVSS3: 8.2
debian
около 1 года назад

Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11 ...

EPSS

Процентиль: 23%
0.00076
Низкий

8.2 High

CVSS3

Дефекты

CWE-754