Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2017-18872

An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider.

VectorNETWORK

PublishedJun 19, 2020, 18:15

Published Bycve@mitre.org

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/mattermost/mattermost-server(Go)04.3.3N/A

github.com/mattermost/mattermost-server(Go)4.4.0-rc14.4.3N/A

References

https://mattermost.com/security-updates/

Weakness Type

CWE-732

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK