Beveiligingsadvies

CVE-2026-4273

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-18 06:56:11

Laatst bijgewerkt 2026-05-18 14:34:29

Toegewezen door Mattermost

CVSS-score 3.7

Status PUBLISHED

Beschrijving

Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate that the RefreshedToken differs from the original invite token during remote cluster invite confirmation which allows an authenticated attacker to bypass token rotation and reuse the original invite token via sending a crafted invite confirmation with a RefreshedToken matching the original token. Mattermost Advisory ID: MMSA-2026-00575

← Alle CVE's bekijken Bekijk op cve.org ↗