NetSight
high8.8

CVE-2019-20865

An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10.

Impact

An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10. The login page allows CSRF.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 4.10.10
from 5.9.0 before 5.9.2
from 5.10.0 before 5.10.2
from 5.11.0 before 5.11.1
Version 5.12.0

Weakness classification

References