NetSight
medium4.3

CVE-2018-21252

An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3.

Impact

An issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers could use multiple e-mail addresses to bypass a domain-based policy for signups.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 4.10.3
from 5.0.0 before 5.0.3
from 5.1.0 before 5.1.1
Version 5.2.0

Weakness classification

References