NetSight
medium4.3

CVE-2017-18872

An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3.

Impact

An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 4.3.3
from 4.4.0 before 4.4.3

Weakness classification

References