Beveiligingsadvies

CVE-2021-37862

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-17 16:10:29
Laatst bijgewerkt 2024-08-04 01:30:09
Toegewezen door Mattermost
CVSS-score 3.7
Status PUBLISHED

Beschrijving

Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using attacker-controlled email addresses via crafted invitation token.