medium5.3
CVE-2016-11075
Mattermost Server exposes sensitive information about team URLs via an API
Impact
An issue was discovered in Mattermost Server before 3.0.0. It allows attackers to obtain sensitive information about team URLs via an API.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/mattermost/mattermost-server | < 2.0.1-0.20160310160916-26ad6d2c7696 | 2.0.1-0.20160310160916-26ad6d2c7696 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Server | before 3.0.0 |