tocsin

CVE-2017-18898

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18898: medium 5.3, EPSS 1.11%

Mattermost Server is vulnerable to DoS through maliciously crafted posts

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5 or later.

go get github.com/mattermost/mattermost-server@v4.0.5
go get github.com/mattermost/mattermost-server@v4.1.1
go get github.com/mattermost/mattermost-server@v4.2.0

Affected

introducedfixedlast affected
04.0.5-
4.1.04.1.1-
4.2.0-rc14.2.0-

Fixed versions

4.0.54.1.14.2.0

Sources

CVE-2017-18898 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18898: unknown, EPSS 1.11%

Mattermost Server is vulnerable to DoS through maliciously crafted posts in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 4.0.5+incompatible or later.

go get github.com/mattermost/mattermost-server@v4.0.5+incompatible
go get github.com/mattermost/mattermost-server@v4.1.1+incompatible
go get github.com/mattermost/mattermost-server@v4.2.0+incompatible

Affected

introducedfixedlast affected
04.0.5+incompatible-
4.1.0+incompatible4.1.1+incompatible-
4.2.0-rc1+incompatible4.2.0+incompatible-

Fixed versions

4.0.5+incompatible4.1.1+incompatible4.2.0+incompatible

Sources

CVE-2017-18898 · published · modified · JSON