tocsin

CVE-2016-11076

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2016-11076: high 7.5, EPSS 0.88%

Mattermost Server does not check if cookies are used over SSL

Action: Upgrade github.com/mattermost/mattermost-server to 3.0.0 or later.

go get github.com/mattermost/mattermost-server@v3.0.0

Affected

introducedfixedlast affected
03.0.0-

Fixed versions

3.0.0

Sources

CVE-2016-11076 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2016-11076: unknown, EPSS 0.88%

Mattermost Server does not check if cookies are used over SSL in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 3.0.0+incompatible or later.

go get github.com/mattermost/mattermost-server@v3.0.0+incompatible

Affected

introducedfixedlast affected
03.0.0+incompatible-

Fixed versions

3.0.0+incompatible

Sources

CVE-2016-11076 · published · modified · JSON