tocsin

Go/github.com/mattermost/mattermost-server CVE-2016-11084: medium 6.1, EPSS 0.34%

Mattermost Server allows XSS via CSRF

Action: Upgrade github.com/mattermost/mattermost-server to 2.1.0 or later.

go get github.com/mattermost/mattermost-server@v2.1.0

Affected

introducedfixedlast affected
02.1.0-

Fixed versions

2.1.0

Sources

CVE-2016-11084 · published · modified · JSON