NetSight
medium6.1

CVE-2017-18877

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2.

Impact

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.0 allow/deny page.

Affected products

VendorProductAffected versions
MattermostMattermost Server
from 4.1.0 before 4.1.2
from 4.2.0 before 4.2.1
Version 4.3.0

Weakness classification

References