tocsin

CVE-2017-18884

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18884: critical

Mattermost Server exposes OAuth personal access tokens to attackers

Action: Upgrade github.com/mattermost/mattermost-server to 4.1.2 or later.

go get github.com/mattermost/mattermost-server@v4.1.2
go get github.com/mattermost/mattermost-server@v4.2.1
go get github.com/mattermost/mattermost-server@v4.3.0

Affected

introducedfixedlast affected
04.1.2-
4.2.0-rc14.2.1-
4.3.0-rc14.3.0-

Fixed versions

4.1.24.2.14.3.0

Sources

CVE-2017-18884 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18884: unknown

Mattermost Server exposes OAuth personal access tokens to attackers in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.1.2+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.1.2+incompatible
go get github.com/mattermost/mattermost-server@v4.2.1+incompatible
go get github.com/mattermost/mattermost-server@v4.3.0+incompatible

Affected

introducedfixedlast affected
04.1.2+incompatible-
4.2.0-rc1+incompatible4.2.1+incompatible-
4.3.0-rc1+incompatible4.3.0+incompatible-

Fixed versions

4.1.2+incompatible4.2.1+incompatible4.3.0+incompatible

Sources

CVE-2017-18884 · published · modified · JSON