Описание
Mattermost Server is vulnerable to webhook and slash command manipulation
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API.
Пакеты
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
< 4.1.2
4.1.2
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
>= 4.2.0-rc1, < 4.2.1
4.2.1
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
>= 4.3.0-rc1, < 4.3.0
4.3.0
Связанные уязвимости
CVSS3: 4.3
nvd
больше 5 лет назад
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API.
CVSS3: 4.3
debian
больше 5 лет назад
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and ...