tocsin

CVE-2018-21258

3 advisories.

Go/github.com/mattermost/mattermost-server CVE-2018-21258: high 7.5, EPSS 1.17%

Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command

Action: Upgrade github.com/mattermost/mattermost-server to 5.1.0 or later.

go get github.com/mattermost/mattermost-server@v5.1.0

Affected

introducedfixedlast affected
05.1.0-

Fixed versions

5.1.0

Sources

CVE-2018-21258 · published · modified · JSON

Go/github.com/mattermost/mattermost-server CVE-2018-21258: unknown, EPSS 1.17%

Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command in github.com/mattermost/mattermost-server

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2018-21258 · published · modified · JSON

Go/github.com/mattermost/mattermost-server/v5 CVE-2018-21258: unknown, EPSS 1.17%

Mattermost Server is vulnerable to a Denial of Service attack through `invite_people` command in github.com/mattermost/mattermost-server

Action: Upgrade github.com/mattermost/mattermost-server/v5 to 5.1.0 or later.

go get github.com/mattermost/mattermost-server/v5@v5.1.0

Affected

introducedfixedlast affected
05.1.0-

Fixed versions

5.1.0

Sources

CVE-2018-21258 · published · modified · JSON