Описание
Mattermost Server allows attackers to create buttons that can launch API requests
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request.
Пакеты
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
< 4.1.2
4.1.2
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
>= 4.2.0-rc1, < 4.2.1
4.2.1
Наименование
github.com/mattermost/mattermost-server
go
Затронутые версииВерсия исправления
>= 4.3.0-rc1, < 4.3.0
4.3.0
Связанные уязвимости
CVSS3: 4.3
nvd
больше 5 лет назад
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request.
CVSS3: 4.3
debian
больше 5 лет назад
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and ...