tocsin

Go/github.com/mattermost/mattermost-server CVE-2017-18873: medium 5.3, EPSS 1.11%

Mattermost Server is vulnerable to channel invisibility DoS via misformatted post

Action: Upgrade github.com/mattermost/mattermost-server to 4.1.2-0.20171013141717-ee57a5829ab1 or later.

go get github.com/mattermost/mattermost-server@v4.1.2-0.20171013141717-ee57a5829ab1
go get github.com/mattermost/mattermost-server@v4.2.1-0.20171013140502-b3e4b0ac9168
go get github.com/mattermost/mattermost-server@v4.3.0

Affected

introducedfixedlast affected
04.1.2-0.20171013141717-ee57a5829ab1-
4.2.04.2.1-0.20171013140502-b3e4b0ac9168-
4.3.0-rc14.3.0-

Fixed versions

4.1.2-0.20171013141717-ee57a5829ab14.2.1-0.20171013140502-b3e4b0ac91684.3.0

Sources

CVE-2017-18873 · published · modified · JSON