tocsin

CVE-2017-18871

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18871: high 7.5, EPSS 1.12%

Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names

Action: Upgrade github.com/mattermost/mattermost-server to 4.2.2 or later.

go get github.com/mattermost/mattermost-server@v4.2.2
go get github.com/mattermost/mattermost-server@v4.3.4
go get github.com/mattermost/mattermost-server@v4.4.5
go get github.com/mattermost/mattermost-server@v4.5.0

Affected

introducedfixedlast affected
04.2.2-
4.3.0-rc14.3.4-
4.4.0-rc14.4.5-
4.5.0-rc14.5.0-

Fixed versions

4.2.24.3.44.4.54.5.0

Sources

CVE-2017-18871 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18871: unknown, EPSS 1.12%

Mattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.2.2+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.2.2+incompatible
go get github.com/mattermost/mattermost-server@v4.3.4+incompatible
go get github.com/mattermost/mattermost-server@v4.4.5+incompatible
go get github.com/mattermost/mattermost-server@v4.5.0+incompatible

Affected

introducedfixedlast affected
04.2.2+incompatible-
4.3.0-rc1+incompatible4.3.4+incompatible-
4.4.0-rc1+incompatible4.4.5+incompatible-
4.5.0-rc1+incompatible4.5.0+incompatible-

Fixed versions

4.2.2+incompatible4.3.4+incompatible4.4.5+incompatible4.5.0+incompatible

Sources

CVE-2017-18871 · published · modified · JSON