NetSight
high7.5

CVE-2017-18917

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7.

Impact

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens.

Affected products

VendorProductAffected versions
MattermostMattermost Server
from 3.6.0 before 3.6.7
from 3.7.0 before 3.7.5
from 3.8.0 before 3.8.2

Weakness classification

References