tocsin

Go/github.com/mattermost/mattermost-server CVE-2017-18875: medium, EPSS 0.73%

Mattermost Server does not prevent System Admin from arbitrary file creation

Action: Upgrade github.com/mattermost/mattermost-server to 4.1.2-0.20171004201910-6be8113eb60c or later.

go get github.com/mattermost/mattermost-server@v4.1.2-0.20171004201910-6be8113eb60c
go get github.com/mattermost/mattermost-server@v4.2.1-0.20171004194140-6d3cb2ce07fc
go get github.com/mattermost/mattermost-server@v4.3.0

Affected

introducedfixedlast affected
04.1.2-0.20171004201910-6be8113eb60c-
4.2.0-rc1.0.20171004154238-fadd9514f6e74.2.1-0.20171004194140-6d3cb2ce07fc-
4.3.0-rc14.3.0-

Fixed versions

4.1.2-0.20171004201910-6be8113eb60c4.2.1-0.20171004194140-6d3cb2ce07fc4.3.0

Sources

CVE-2017-18875 · published · modified · JSON