tocsin

CVE-2017-18893

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18893: medium 6.1

Mattermost Server is vulnerable to XSS through display name field

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5 or later.

go get github.com/mattermost/mattermost-server@v4.0.5
go get github.com/mattermost/mattermost-server@v4.1.1
go get github.com/mattermost/mattermost-server@v4.2.0

Affected

introducedfixedlast affected
04.0.5-
4.1.04.1.1-
4.2.0-rc14.2.0-

Fixed versions

4.0.54.1.14.2.0

Sources

CVE-2017-18893 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18893: unknown

Mattermost Server is vulnerable to XSS through display name field in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.0.5+incompatible
go get github.com/mattermost/mattermost-server@v4.1.1+incompatible
go get github.com/mattermost/mattermost-server@v4.2.0+incompatible

Affected

introducedfixedlast affected
04.0.5+incompatible-
4.1.0+incompatible4.1.1+incompatible-
4.2.0-rc1+incompatible4.2.0+incompatible-

Fixed versions

4.0.5+incompatible4.1.1+incompatible4.2.0+incompatible

Sources

CVE-2017-18893 · published · modified · JSON