CVE-2018-21260

Опубликовано: 19 июн. 2020

Источник: nvd

CVSS3: 2.7

CVSS2: 4

EPSS Низкий

Описание

An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.

Ссылки

https://mattermost.com/security-updates/
Vendor Advisory
https://mattermost.com/security-updates/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия от 4.6.0 (включая) до 4.6.3 (исключая)

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия от 4.7.0 (включая) до 4.7.4 (исключая)

cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*

Версия от 4.8.0 (включая) до 4.8.1 (исключая)

EPSS

Процентиль: 46%

0.00232

Низкий

2.7 Low

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-21260

CVSS3: 2.7

debian

около 5 лет назад

An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and ...

GHSA-2294-5jgv-f8mf

github

около 3 лет назад

An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.

EPSS

Процентиль: 46%

0.00232

Низкий

2.7 Low

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200