tocsin

CVE-2017-18896

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18896: medium 5.3, EPSS 0.78%

Mattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5 or later.

go get github.com/mattermost/mattermost-server@v4.1.1
go get github.com/mattermost/mattermost-server@v4.0.5
go get github.com/mattermost/mattermost-server@v4.2.0

Affected

introducedfixedlast affected
4.1.04.1.1-
04.0.5-
4.2.0-rc14.2.0-

Fixed versions

4.1.14.0.54.2.0

Sources

CVE-2017-18896 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18896: unknown, EPSS 0.78%

Mattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.0.5+incompatible
go get github.com/mattermost/mattermost-server@v4.1.1+incompatible
go get github.com/mattermost/mattermost-server@v4.2.0+incompatible

Affected

introducedfixedlast affected
04.0.5+incompatible-
4.1.0+incompatible4.1.1+incompatible-
4.2.0-rc1+incompatible4.2.0+incompatible-

Fixed versions

4.0.5+incompatible4.1.1+incompatible4.2.0+incompatible

Sources

CVE-2017-18896 · published · modified · JSON