NetSight
medium4.3

CVE-2017-18870

An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4.

Impact

An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 4.3.4
from 4.4.0 before 4.4.5
Version 4.5.0

Weakness classification

References