tocsin

CVE-2017-18895

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18895: medium 5.3

Mattermost Server exposes sensitive user status information via REST API version 4 endpoint

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5 or later.

go get github.com/mattermost/mattermost-server@v4.0.5
go get github.com/mattermost/mattermost-server@v4.1.1
go get github.com/mattermost/mattermost-server@v4.2.0

Affected

introducedfixedlast affected
04.0.5-
4.1.04.1.1-
4.2.0-rc14.2.0-

Fixed versions

4.0.54.1.14.2.0

Sources

CVE-2017-18895 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18895: unknown

Mattermost Server exposes sensitive user status information via REST API version 4 endpoint in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.0.5+incompatible
go get github.com/mattermost/mattermost-server@v4.1.1+incompatible
go get github.com/mattermost/mattermost-server@v4.2.0+incompatible

Affected

introducedfixedlast affected
04.0.5+incompatible-
4.1.0+incompatible4.1.1+incompatible-
4.2.0-rc1+incompatible4.2.0+incompatible-

Fixed versions

4.0.5+incompatible4.1.1+incompatible4.2.0+incompatible

Sources

CVE-2017-18895 · published · modified · JSON