medium4.9
CVE-2017-18918
An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5.
Impact
An issue was discovered in Mattermost Server before 3.7.3 and 3.6.5. A System Administrator can place a SAML certificate at an arbitrary pathname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Server | from 3.6.0 before 3.6.5 from 3.7.0 before 3.7.3 |