CVE-2017-18920 An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mattermost server | < 3.6.2 | 3.6.2 |
References
- mattermost.com vendor-advisory