critical9.8
CVE-2017-18920
An issue was discovered in Mattermost Server before 3.6.2.
Impact
An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mattermost | Mattermost Server | before 3.6.2 |