CVE-2017-18901

Go/github.com/mattermost/mattermost-server CVE-2017-18901: medium 5.3

Mattermost Server exposes private team invite ID

Action: Upgrade github.com/mattermost/mattermost-server to 3.10.3 or later.

go get github.com/mattermost/mattermost-server@v3.10.3

go get github.com/mattermost/mattermost-server@v4.0.4

Affected

Fixed versions

Sources

• osv: GHSA-c253-8hr4-r8v9
• https://nvd.nist.gov/vuln/detail/CVE-2017-18901
• https://github.com/mattermost/mattermost/commit/5e822a7d09214d5446d54e02a0611df8e64f3aa5
• https://github.com/mattermost/mattermost/commit/638c38cc0d2296335a0fbd5bde8b6d2cbf9f9062
• https://github.com/mattermost/mattermost/commit/a78ed923f1c73ae5551893374fb9803ee2f4c8e6
• https://github.com/mattermost/mattermost
• https://mattermost.com/security-updates

CVE-2017-18901 · published 2022-05-24T17:21:06Z · modified 2026-02-03T03:02:20.842132Z · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18901: unknown

CVE-2017-18901 in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-4304
• https://nvd.nist.gov/vuln/detail/CVE-2017-18901
• https://mattermost.com/security-updates/

CVE-2017-18901 · published 2026-01-13T16:42:40Z · modified 2026-03-03T04:57:51.369332Z · JSON