tocsin

CVE-2017-18915

2 advisories.

Go/github.com/mattermost/mattermost-server CVE-2017-18915: critical 9.8, EPSS 1.18%

Mattermost Server server restarts may provide attackers with API access

Action: Upgrade github.com/mattermost/mattermost-server to 3.6.7-0.20170420152529-0968e4079e0a or later.

go get github.com/mattermost/mattermost-server@v3.6.7-0.20170420152529-0968e4079e0a
go get github.com/mattermost/mattermost-server@v3.7.5
go get github.com/mattermost/mattermost-server@v3.8.2

Affected

introducedfixedlast affected
03.6.7-0.20170420152529-0968e4079e0a-
3.7.03.7.5-
3.8.03.8.2-

Fixed versions

3.6.7-0.20170420152529-0968e4079e0a3.7.53.8.2

Sources

CVE-2017-18915 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2017-18915: unknown, EPSS 1.18%

Mattermost Server server restarts may provide attackers with API access in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server to 3.7.5+incompatible or later.

go get github.com/mattermost/mattermost-server@v3.7.5+incompatible
go get github.com/mattermost/mattermost-server@v3.8.2+incompatible

Affected

introducedfixedlast affected
3.7.0+incompatible3.7.5+incompatible-
3.8.0+incompatible3.8.2+incompatible-

Fixed versions

3.7.5+incompatible3.8.2+incompatible

Sources

CVE-2017-18915 · published · modified · JSON