Go/github.com/mattermost/mattermost-server CVE-2023-1777: medium 5.3, EPSS 0.54%
Mattermost vulnerable to information disclosure
Action: Upgrade github.com/mattermost/mattermost-server to 1.4.1-0.20230301145909-10be118d99a5 or later.
go get github.com/mattermost/mattermost-server@v7.8.1go get github.com/mattermost/mattermost-server@v7.7.2go get github.com/mattermost/mattermost-server@v7.1.6go get github.com/mattermost/mattermost-server@v1.4.1-0.20230301145909-10be118d99a5Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.8.0 | 7.8.1 | - |
| 7.7.0 | 7.7.2 | - |
| 7.1.0 | 7.1.6 | - |
| 1.4.1-0.20211025164829-f7a8147b825c | 1.4.1-0.20230301145909-10be118d99a5 | - |
Fixed versions
| 7.8.1 | 7.7.2 | 7.1.6 | 1.4.1-0.20230301145909-10be118d99a5 |
Sources
- osv: GHSA-3wq5-3f56-v5xc#Go/github.com/mattermost/mattermost-server
- https://nvd.nist.gov/vuln/detail/CVE-2023-1777
- https://mattermost.com/security-updates
CVE-2023-1777 · published · modified · JSON