Security Advisory

CVE-2017-18895

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-19 18:43:14
Last updated 2024-08-05 21:37:44
Assigner mitre
State PUBLISHED

Description

An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows attackers to obtain sensitive information (user statuses) via a REST API version 4 endpoint.