NetSight
high7.5

CVE-2019-20874

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8.

Impact

An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during a role change.

Affected products

VendorProductAffected versions
MattermostMattermost Server
before 4.10.8
from 5.7.0 before 5.7.3
from 5.8.0 before 5.8.1
Version 5.9.0

References